It's just another type of test harness. It's Debian Live, so you can extend or customize it to suit a particular need. That it is ready to run and leaves no tr

It's just another type of test harness. It's Debian Live, so you can extend or customize it to suit a particular need. That it is ready to run and leaves no trace adds a lot of value. You may not win a bounty from a vendor, but it's pretty trivial to take their app, add it to an image and expose potential vectors. Your own PIR may benefit from the forensics tools (without the lead time of getting them working). It doesn't deliver any 'security' on its own.