[ehc]

Has Keratin gone through any security research / penetration testing?

[cainlevy]

I would dearly love that! The answer is not yet. Can you recommend any testers that are OSS-friendly?

My current plan is to set up a HackerOne page. I know that bug bounties don't replace good penetration testing, but it's a start.