1. A system comprising: a memory; one or more processors; a plurality of segmented environments, each of the plurality of segmented environments comprising an enforcement point comprising an active probe device, and a plurality of workloads each implementing at least one service component, the plurality of segmented environments collectively providing a service, each of the plurality of segmented environments providing a portion of the service; and a data center server coupled with the plurality of segmented environments over a network, the data center server comprising: a security controller providing a security policy to each of the plurality of segmented environments, the security policy being configured using the service; and an active probe controller requesting each active probe device of the plurality of segmented environments to perform a respective scan of a plurality of scans, the scans including packet insertion and/or modification, the scans performed on the plurality of segmented environments collectively providing the service, the scans occurring in parallel on the plurality of workloads implementing the at least one service component.