Attack path discovery engine in a security management system

One or more computer-storage media having computer-executable instructions embodied thereon that, when executed by a computing system having a processor and memory, cause the processor to perform operations, the operations comprising:

• communicating a request for security posture associated with a computing environment;
• based on the request, receiving a security posture visualization associated with the computing environment, wherein the security posture visualization is associated with one or more attack path, the one or more attack paths are associated with an attack path discovery computation model supports automatically discovering attack paths for computing environments associated with computing environment graphs;
• and
• causing display of the security visualization comprising the one or more attack for the computing environment.

A computer-implemented method, the method comprising:

• accessing an attack path discovery computation model, wherein the attack path discovery computation model supports automatically discovering attack paths for computing environments associated with computing environment graphs;
• accessing a computing environment graph comprising computing components of a computing environment;
• using the attack path discovery computation model and the computing environment graph, identifying a plurality of attack paths associated with the computing environment;
• and
• communicate the plurality of attack paths for the computing environment.