Method and system for ensuring compliance of computing systems

A system for analyzing computing devices for properties of at least one computer software comprised in the at least one computing system, the system comprising:

• a processor;
• a memory or a data storage that stores data and a program;
• a communication device that communicates with the at least one computing system;
• and
• a user interface that receives a user entry, wherein, when the program is executed by the processor, the processor is caused to:
• load, via the processor, from the data storage, the memory, or via the communication device, or via the user entry through the user interface, at least one input data for the at least one computer software;
• determine, via the processor, at least one result pertaining to vulnerabilities present or expected to be present within the at least one computer software;
• map via the processor, the vulnerabilities to frameworks, determining the at least one result pertaining to an outcome of the vulnerability-to-framework mapping;
• generate, via the processor, output data describing the at least one result;
• store, via the processor, the output data pertaining to the at least one result in the memory;
• and
• determine, via the processor, if the at least one result satisfies a predetermined condition, and if so, execute at least one action corresponding to the at least one result on the at least one computing system, wherein
• the predetermined condition comprises identified vulnerability meeting a severity threshold, identified vulnerability meets at least one predetermined vulnerability categories, identified failures to fulfill a framework requirement due to identified vulnerabilities, identified mitigation for the at least one of the vulnerabilities, and identified weaknesses.