Email Record: The art of software security assessment