how to assess features and security in practice