Thanks for this insight, 8organicbits!

You may also like https://github.com/assetnote/kiterunner

And I do understand this is a part of your manual penetration testing routine.

But what about semi-automated tools, are you aware of any a small mobile app team could configure and run to continuously monitor the security of their app?