Continuous security delivery fabric

A system, comprising:

• one or more processors;
• and
• memory including a plurality of computer-executable components that are executable by the one or more processors to perform a plurality of acts, the plurality of acts comprising:
• receiving a selection of a componentized security policy, wherein the componentized security policy includes a plurality of encapsulated security routines orchestrating a performance of multiple security functions;
• executing the plurality of encapsulated security routines of the componentized security policy against a shadow environment that is a mirror instance of an enterprise installation instance, in which the enterprise installation instance includes one or more software systems that automate operations of an enterprise;
• receiving results from performance of the multiple security functions orchestrated by the plurality of encapsulated security routines included in the componentized security policy;
• and
• inferring an existence of at least one security issue based at least on the results.

A method to remediate information technology installation security issues, comprising:

• receiving a selection of a componentized security policy, wherein the componentized security policy includes one or more encapsulated security routines orchestrating a performance of at least one security function;
• executing the one or more encapsulated security routines of the componentized security policy against a shadow environment that is a mirror instance of an enterprise installation instance, in which the enterprise installation instance includes one or more software systems that automate operations of an enterprise;
• receiving results from performance of the at least one security function orchestrated by the one or more encapsulated security routines included in the componentized security policy;
• and
• inferring an existence of at least one security issue based at least on the results.