testing max security risk