1. A method comprising: one or more processors, executing program instructions of a non-transitory storage medium, selecting a conditional statement associated with a software component of a Web service by performing a static code analysis to determine the conditional statement within an algorithm of the software component; one or more processors, executing program instructions of a non-transitory storage medium, determining test values associated with the conditional statement; one or more processors, executing program instructions of a non-transitory storage medium, generating a set of security tokens based on the test values, wherein the set of security tokens is associated with a claims-based authentication policy, wherein the set of security tokens is populated with at least one of a value resulting in the evaluation of the conditional statement to be true or to be false; one or more processors, executing program instructions of a non-transitory storage medium, determining an outcome of the conditional statement based on an input and a criteria using dynamic code analysis, wherein the input is a value associated with the claims-based authentication policy, wherein the criteria is an authentication criteria specified within the algorithm; one or more processors, executing program instructions of a non-transitory storage medium, responsive to the determined outcome, creating a decision tree associated with the outcome; and one or more processors, executing program instructions of a non-transitory storage medium, presenting the decision tree within a user-interface.