secant: Security Cloud Assessment Tool