At a company where I worked previously one team only noticed one of their systems hadn't been correctly patched against Heartbleed because there was an exploit available that they could use to test.

Who knows what would have happened days/weeks/months later if that hadn't been the case.