From the explanation here it sounds completely opposite concept, they download the server and check it rather than doing the checks on production environment