Describir: Finding and fixing vulnerabilities in information systems :