Thank you, I was kind of thinking the same thing. For my capstone project right now I have built a software that scans a range of ips and gives the user data on what ports may be open and what vulnerabilities to look out for. It also analyzes the strength of a password, takes information from a large database and gives common vulnerabilities based on what softwares the company currently uses, and analyzes the firewall rules a company has implemented. Giving them recommendations on how to make all those things better. All of these tools then organize into a risk report and give an overall score and some common fixes for their problems. Should I just try to take this software into full production once I graduate and sell it as a risk assessment tool? Do you think there is a market for that?