System and method for identifying network security threats and assessing network security

A method for security assessment of a computer network, the method comprising:

• transmitting a first executable program code from a security assessor that controls one or more security assessment computers on a network to a first end device on the network, the first executable program code for acting as an agent on the first end device, and the first executable program code configured to be executed by a browser application of the first end device,
• wherein the first executable program code is configured to collect software and/or hardware attribute information regarding the first end device and transmit the same to at least a first security assessment computer of the one or more security assessment computers.

A method comprising:

• loading a program code into a plurality of browsers at end user devices of an entity's network;
• using the program code performing a vulnerability assessment that determines vulnerabilities of the entity's network;
• based on the determined vulnerabilities, performing a set of security tests on the end user devices that include those vulnerabilities.