This is a press release masquerading as a blog post.

It would be pleasant to know a bit more about the whole of what was reported. If this system reported 24 potential vulnerabilities of which thirteen were legitimate that's pretty excellent, if it only reported these twelve then that's astounding - but we don't know how many false reports were filtered through either by the OpenSSL team or by the folks running this agent and the primary issue.

"Our goal was to turn what used to be an elite, artisanal hacker craft into a repeatable industrial process"

So putting everyone in the security industry out of work is an admirable goal?