PhpMyAdmin Project Successfully Completes Security Audit
Stupid question, how does a security audit work? Do the consultants just read through the code? Do they try to find security bug like they do on bug bounty programs?