Machine-based security requirements assessment

A method, comprising:

• receiving, by a microprocessor, first input regarding security characteristics of a project;
• scanning, by the microprocessor, the project for one or more security requirements based on the received first input;
• building, by the microprocessor, a list of security requirements for the project based on the received first input;
• using, by the microprocessor, a machine learning process to identify addition of one or more security requirements and/or removal of one or more security requirements from the list of security requirements;
• running, by the microprocessor, a first security vulnerability scan using the list of security requirements with the additional one or more security requirements and/or the removed one or more security requirements;
• and
• generating for display by the microprocessor, results for the first security vulnerability scan,
• wherein the results for the first security vulnerability scan provide a security rating for the one or more security requirements including none, partial and complete.

A non-transient computer readable medium having stored thereon instructions that cause a processor to execute a method, the method comprising instructions to:

• receive first input regarding security characteristics of a project;
• scan the project for one or more security requirements based on the received first input;
• build a list of security requirements for the project based on the received first input;
• use a machine learning process to identify addition of one or more security requirements and/or removal of one or more security requirements from the list of security requirements;
• run a first security vulnerability scan using the list of security requirements with the additional one or more security requirements and/or the removed one or more security requirements;
• and
• generate for display, results for the first security vulnerability scan,
• wherein the results for the first security vulnerability scan provide a security rating for the one or more security requirements including none, partial and complete.