In reply to Mark Maunder.

WP-CLI Vulnerability Scanner’s intent is more to be used with site development, likely during CD/CI, to check to ensure insecure plugins are not involved in site functionality. It’s not intended to mass-scan sites, but can leverage the same base Wordfence Intelligence API.