I’ve been privy to contracts that specify that the only necessary security implementations are those flagged as medium or high priority vulnerabilities by autom

I’ve been privy to contracts that specify that the only necessary security implementations are those flagged as medium or high priority vulnerabilities by automated code evaluation tools.