Cross-platform software security risk