1. An apparatus for detecting configuration options, the apparatus comprising: at least one processor; a non-transitory computer-readable storage medium including instructions executable by the at least one processor, the instructions configured to implement, an option detector configured to receive a basic model of a security protocol and a set of options, each option being a variation of the basic model, the option detector configured to detect which options are configured in an implementation of at least one at least one security protocol entity based on the basic model and the set of options.