Having worked on software which received audits from a "natonally recognized security company", this statement on their part gives me no additional confidence.

Having worked on software which received audits from a "natonally recognized security company", this statement on their part gives me no additional confidence. I performed what I would consider a "light" audit on the same codebase and found database injection attacks, auth forging attacks, denial of service; and the infrastructure it was deployed on used versions of libraries which opened the service up to plausible remote code execution. Ditto, it just basically says "trust us"; no offense to the authors.