Are you proposing software to automatically detect flaws? I don't think "minimum security solution" sounds great. Security should be tested per case. I can't see a any software detecting everything without having ridiculous levels of access.