C. CVAL does not exist. The rest are examples of tools that can help analyze the attack surface of a system.