Initial thoughts on continuous security testing