Uncover structural flaws
Reliability: Misplaced exception handling, using non-thread safe code, etc.
Security: NoSQL/SQL injections, OS command injections, server-side request forgeries, etc.
Efficiency: Looping web service or messaging calls, unreleased database connections, etc.