1. A method of evaluating a protected network, the method comprising: selecting in a security assurance system a network security product, wherein the security product is associated with the protected network; selecting a threat from a plurality of threats stored on the security assurance system; launching on the security assurance system an evaluation of the security product based upon the threat; and reporting to a user of the security assurance system a result of the evaluation.