The engine under the workbench. It recovers what a deployed contract can do from its bytecode, then proves each finding by executing it on a pinned fork.
Under the workbench is an EVM analysis engine built for deployed contracts: it reconstructs what the code can do from the bytecode itself, then proves what it found by executing it.
Source and verified ABIs enrich the analysis. The engine never requires them.