security testing paramerts