3 ms·

This has been discussed to death, and the conclusion is generally that testing for unknown security bugs is not possible (or at least not practical).