First, you need to make sure you have a site set up, and make sure to set up a testing server with the server language you want to use (asp, php, or cold fusion). The security Assist option should be under the Insert -> WebAssist. It is probably grayed out because you have an html file open, but you need a server side site set up first.
dynamic_site_definitions.php