computer software used to assess security vulnerabilities in open network servers and application programs