If you're looking for programmers to research security holes, you're basically asking for them to look through opensource for bugs and whatnot. If it's closed-source, it's a lot more difficult...