This is not just some black box penetration testing. This whole system is open source. They pore through each line, looking for vulnerabilities, looking for security holes.