I’ve so far been successful at getting Fable to find security issues, but I’m careful to not prompt it too directly. I point it at my server code and tell it to find general issues, which has so far resulted in discovering a few minor bugs that Opus has never raised under similar conditions.