Has anyone tried these security models for finding bugs from the outside vs say Fable reviewing code for bugs on the inside?