System and method for testing network and security devices to detect and mitigate vulnerabilities

A computer program product for testing network and security devices to detect and mitigate vulnerabilities, comprising a non-transitory computer-readable storage medium having computer-executable instructions for:

• scanning an entity network to identify one or more entity devices associated with an entity, wherein the one or more entity devices comprise of security devices and network devices, wherein the security devices and the network devices comprise firewalls, antivirus, intrusion detection systems, unified threat management systems, network load balancers, network access control devices, wireless intrusion prevention and detection systems, web filters, spam filters, VPN gateways, email security gateways, proxy servers, content filtering devices, and network device backup and recovery systems;
• identifying one or more rules for the one or more entity devices based on accessing data from one or more data repositories, wherein the one or more rules define one or more controls and security measures that the one or more entity devices require to function and to be a part of the entity network;
• automatically generating one or more tests comprising executable portions of code based on the one or more rules;
• performing the one or more tests on the one or more entity devices based on the one or more rules identified for the one or more entity devices;
• determining that at least a first entity device of the one or more entity devices does not meet the one or more rules;
• and
• performing one or more actions to mitigate vulnerabilities associated with the first entity device not meeting the one or more rules.

A computerized method for testing network and security devices to detect and mitigate vulnerabilities, the method comprising:

• scanning an entity network to identify one or more entity devices associated with an entity, wherein the one or more entity devices comprise of security devices and network devices, wherein the security devices and the network devices comprise firewalls, antivirus, intrusion detection systems, unified threat management systems, network load balancers, network access control devices, wireless intrusion prevention and detection systems, web filters, spam filters, VPN gateways, email security gateways, proxy servers, content filtering devices, and network device backup and recovery systems;
• identifying one or more rules for the one or more entity devices based on accessing data from one or more data repositories, wherein the one or more rules define one or more controls and security measures that the one or more entity devices require to function and to be a part of the entity network;
• automatically generating one or more tests comprising executable portions of code based on the one or more rules;
• performing the one or more tests on the one or more entity devices based on the one or more rules identified for the one or more entity devices;
• determining that at least a first entity device of the one or more entity devices does not meet the one or more rules;
• and
• performing one or more actions to mitigate vulnerabilities associated with the first entity device not meeting the one or more rules.