automated-security-testing-draft