Automated security software testing