How to Assess a Security Vendor on the Sitting-Duck Scale · HackerTrans