Once there used to be free security-self-testing packages on the net, amusingly by names like SATAN and SAINT, you might want to look at them. I think it's not a Perl question though.