1. A computing device comprising: a storage containing an executable object; and one or more logic elements comprising a security engine operable for: detecting that the executable object has attempted to perform an action; intercepting the action; assigning a reputation to the action; and acting on the reputation.