Developmental security test and evaluation