Category evaluating security tool att&ck coverage