How much do you rely on automation vs manual work in vulnerability hunting?