SAAS configuration and security analysis engine

A method for use in a security scanner within a tenant in a SaaS environment, the security scanner including an operation input receiver, a configuration review engine, a static code analyzer, a malicious data generator, a runtime security analysis engine generator, and a runtime security analysis engine executor, the method comprising:

• receiving, by the operation input receiver, an operation input for the tenant;
• determining, by the configuration review engine, a current state of configurable settings of the tenant;
• generating, by the static code analyzer, a list of exposed features for the tenant;
• generating, by the malicious data generator, context aware malicious data for the tenant, wherein the generation of context aware malicious data includes comparing a current data schema and layout utilized by the SaaS environment to other data schema and layouts that have been determined to be susceptible to specific malicious data, and utilizing, by the malicious data generator, the specific malicious data to generate the context aware malicious data;
• mapping, by the runtime security analysis engine generator, code files for the tenant;
• generating, by the runtime security analysis engine generator, a runtime security analysis engine from the current state of the configurable settings, the list of exposed features, the context aware malicious data, and the code files mapped;
• and
• executing, by the runtime security analysis engine executor, the runtime security analysis engine to generate an output to influence operation of the tenant.