A couple of years ago I started receiving a lot of spam to [email protected]. I've opened support tickets asking whether they had a known breach but they simply closed my tickets without explanation, and any attempt to use their live chats were closed immediately by their staff or completely ignored. I used to hold Rackspace in such high esteem; I wonder what happened?
I have been using Semmle daily to automate much of the vulnerability discovery process and I am extremely satisfied.
We run it over millions of lines of Java code and have not yet run into scale or perf problems.
Developing custom queries and defining security invariants in a logic language is, quite honestly, a joy.