Security intelligent automation for software development, security, and operations

Abstract

Various embodiments of the present technology generally relate to systems and methods for providing a Security Intelligence Automation (SIA) engine. The SIA engine provided herein may include multiple security test plug-ins configured to perform a security assessment on a plurality of Open System Interconnection (OSI) layers of a target application. In an aspect, a method includes determining, by the SIA engine, security inputs for security test plug-ins and generating, by the SIA engine, one or more templates based on the security inputs. Each of the templates may correspond to a respective security test plug-in. After the security inputs are determined and the templates generated, the SIA engine may perform the security assessment on the target application based on the one or more templates, and in some cases the security inputs. Responsive to performing the security assessment, the SIA engine may generate a report including results from the security assessment.