Security and compliance automation applications have stormed the market. These tools have disrupted the security compliance industry and present both unique challenges and opportunities for security audit firms as well as organizations leveraging these tools. This presentation is designed to shed light on the good and the bad that these new tools have created in the industry from the perspective of an auditor who has worked directly with many of them. We will also discuss how to effectively navigate the use of these tools in security control audits.