Things Hard to Measure
Security design goodness
Attack surface
nmap not enough
port 25 seems to have a large surface
port 137 does too.