Auto vulnerability scanners turn up mostly false positives

And they're still cheaper than looking for attacks manually

Nullcon Automated vulnerability scanners turn up mostly false positives, but even the wild goose chase that results can be cheaper for businesses than manual processes, according to NCC Group security engineer Clint Gibler."