The most significant shortcoming of manual code review is in the manual part. Manual reviews, rather than automated reviews, typically have a higher impact on developer productivity, are only as capable at finding security defects as are the reviewers, and, most importantly, are slow and difficult to scale