> dennis: just an idea, anyone ever (successfully) audited its code?
Do you mean the server-side code, or the client-side code? They released the source to the client a few months back, and I know for a fact that both Coverity and Fortify have been run on the client code, with no huge holes discovered.
Note: Registration is required to post to the forums.