Taking a ratio of bugs found/total bugs is pretty meaningless, but it’s still useful to have analysis that finds the majority of buffer overflows or data races.