Yep, F500 companies bring in all sorts of external tools to look at their source code, for compliance, security, etc.