But if we patch all of the vulnerabilities, who will pay for our vulnerability scanner?