I have used AISAFE a lot for security research involving WordPress plugins and CVE-related submissions through the Wordfence program. Pros: + Great with mapping important parts of codebase and highlighting the areas worth looking into. + Reduces a lot of time spent searching trough bloat unrelated code. + Makes the whole manual testing part a lot easier. + Useful for pentesters, bug bounty hunters or any type of source-code audits. Cons: - Some leads might not be exploitable and manual trimming is still required. Overall AISAFE is a great skill MULTIPLIER for any pentester, it wont replace you but it will make you better at it.