Provision and execution of customized security assessments of resources in a computing environment

A system, comprising one or more hardware computing devices configured to execute specific computer-executable instructions that upon execution cause the system to:

• providing to a user computing device a user interface that enables a user of the user computing device to select any of a plurality of available rules packages available via an electronic marketplace;
• receive, from the user computing device, user input comprising a selection of a first security assessment from the plurality of security assessments selectable via the electronic marketplace, the first security assessment invoking a first rules package comprising a plurality of first rules that operate on assessment data to evaluate a first set of the one or more security characteristics;
• and
• cause the first rules package to be associated with the user account;
• receive a request associated with the user account to cause an instance of a first sensor to produce first sensor results describing a computing resource associated with the user;
• and
• receive a request associated with the user account to cause an instance of the first security assessment to be performed on the computing resource, wherein the instance of the first security assessment causes a security assessment system to receive the first sensor results and to produce the assessment data from the first sensor results, wherein the first rules package is prevented from accessing the first sensor results.

A method, comprising:

• receiving, from a requesting device, a request to provision a security assessment within a computing environment of a computing resource service provider, wherein the security assessment:
• causes one or more sensors of the computing environment to produce sensor results describing activity of a target computing resource within the computing environment;
• and
• invokes one or more rules packages comprising a plurality of rules that identify security vulnerabilities of the target computing resource;
• providing to the requesting device a user interface that enables a user of the user computing device to select any of a plurality of available rules packages;
• receiving, via the user interface, user input comprising a selection of a first rules package comprising a plurality of first rules that operate on assessment data to identify the security vulnerabilities, wherein the first rules package cannot operate on the sensor results;
• and
• associating the first rules package with a user account to enable a user associated with the user account to launch an instance of a first security assessment on a computing resource associated with the user, the first security assessment invoking the first rules package and causing a security assessment system of the computing environment to receive the sensor results and produce the assessment data from the sensor results.