One man operations that are in production - this is the perfect use case for that same person to run an agent to look for credentials that are not used, may have been exposed, etc... And obviously spend some cash on code review agents.