Online and Offline Security Policy Assessment