Automation in vulnerability scanning just doesn't work. We've tried many and the end result is too much noise. Code better, review in multiple steps. Simple efforts do work very well.