A system for identifying customization changes, the system comprising: a processor; and a memory coupled to the processor, wherein the memory includes instructions executable by the processor to cause the system to: receive an indication of a baseline instance of platform software, wherein the baseline instance complies with a set of security best practices provided via one or more baseline scripts of the baseline instance; receive an indication of a customized instance, wherein the customized instance is a customized version of the baseline instance, wherein the customization is in the form of a software update of the baseline instance; receive an indication of one or more aspects to be compared between the baseline instance and the customized instance wherein the one or more indicated aspects comprise any of assessments, tables, access control lists (ACLs), user interface ages, glide properties, processors, wherein at least one of the indicated aspects comprises part of the set of security best practices; identify a baseline script of the baseline instance and a custom script of the customized instance; compare the identified baseline script of the baseline instance to the identified custom script of the customized instance to identify one or more changes between the baseline instance and the customized instance with regard to the one or more indicated aspects; identify from the comparison between the identified baseline script and the identified custom script that the customized instance does not incorporate the set of security best practices, wherein not incorporating the set of security best practices is associated with security flaws; generate a graphical user interface, the graphical user interface being configured to identify the identified one or more changes between the baseline instance, and the custom instance, with regard to the one or more indicated aspects; determine one or more updates to the customized instance to address security flaws associated with the customized instance not incorporating the set of security best practices; provide to a user instructions for updating the customized instance to bring the customized instance into compliance with the set of security best practices, wherein the instructions comprise how to integrate the security best practices into the customized instance; and receive inputs according to the instructions making the one or more updates to the customized instance to bring the customized instance into compliance with the set of security best practices. receive an indication of a baseline instance of platform software, wherein the baseline instance complies with a set of security best practices provided via one or more baseline scripts of the baseline instance; receive an indication of a customized instance, wherein the customized instance is a customized version of the baseline instance, wherein the customization is in the form of a software update of the baseline instance; receive an indication of one or more aspects to be compared between the baseline instance and the customized instance wherein the one or more indicated aspects comprise any of assessments, tables, access control lists (ACLs), user interface ages, glide properties, processors, wherein at least one of the indicated aspects comprises part of the set of security best practices; identify a baseline script of the baseline instance and a custom script of the customized instance; compare the identified baseline script of the baseline instance to the identified custom script of the customized instance to identify one or more changes between the baseline instance and the customized instance with regard to the one or more indicated aspects; identify from the comparison between the identified baseline script and the identified custom script that the customized instance does not incorporate the set of security best practices, wherein not incorporating the set of security best practices is associated with security flaws; generate a graphical user interface, the graphical user interface being configured to identify the identified one or more changes between the baseline instance, and the custom instance, with regard to the one or more indicated aspects; determine one or more updates to the customized instance to address security flaws associated with the customized instance not incorporating the set of security best practices; provide to a user instructions for updating the customized instance to bring the customized instance into compliance with the set of security best practices, wherein the instructions comprise how to integrate the security best practices into the customized instance; and receive inputs according to the instructions making the one or more updates to the customized instance to bring the customized instance into compliance with the set of security best practices.