The aim of this paper is to show the recent progress in the design and prototypical development of a software suite Sunlight Security Systems (former Copra-Breeder) for semi-automatic generation of test methodologies and security checklists for IT vulnerability assessment of a company of arbitrary size.