Security tools are excellent at finding trouble. ArmorCode has built a business around the awkward next question: who is going to fix it?