Practical Security Automation and Testing