Why dont you just perform a full audit, theres no way any prog can give you an accurate secuirty analysis