When adding a new app, the initial test starts as soon as the onboarding steps are completed. A bit too early IMHO.

Even if AI is enabled, pages and DB fields sensitivity usually needs some review. Therefore, the initial test results has good chances to be useless as it's done before the sensitivity review. I usually find myself to fire a second test very shortly after the 1st one.

You could save some WU by adding an option to the onboarding process asking the user if they want or not to check the sensitivity rating before the initial test.