Comment by dotancohen

There actually is a really good tool for auditing such systems.

https://learntla.com/introduction/

I discovered it here on HN just recently, in a comment on a new tool in the same problem space.