includes tools for testing for security vulnerabilities, or verifying the
security properties or secure configuration of components of the software’s
execution environment (e.g., network operating systems, web servers, etc.),
and for testing system-level security functions performed between software