Someone built a scanner that tells startups what hackers can actually exploit, not just 500 random warnings.