If I hint it might be security sensitive code, it bumps the effort level and burns my usage.
But it works quite well.
The findings are often debatable or unreachable states but it does find stuff and improves the overall quality I find.
What's funny though is that it almost always inevitably finds something wrong, even if you just ran it in another window and fixed everything it found. There is really a point of diminishing returns.
As a solopreneur of a boring SMB.
I still do coding and build my own tools but I don’t see the need for agent swarms or Muse or Grok Bot or any of that.
The reason why I stay away is because I like to do QA on the slop these things generate. Having them run amok just makes me nervous.