That's great you found good auditors, and that will probably work out just fine. Another idea is that real attackers are your only hope (https://news.ycombinat

That's great you found good auditors, and that will probably work out just fine. Another idea is that real attackers are your only hope (https://news.ycombinator.com/item?id=7238750 https://news.ycombinator.com/item?id=7238750) maybe. Auditors are supposed to simulate real attackers, and maybe these serious auditors are identical to attackers except you don't pay them as much as they could get some other way like publishing your exploits on the black market. Speaking of market, Schneier said you really need a mass market to test things (from the above link).