You could contact a well known security expert that does this kind of stuff professionally, unless you want to make a name for yourself.