Certainly a very interesting product and something I see gaining increasing popularity, I was wondering if there have been have publicly published independent security reviews on the product / code, default configuration and recommended configuration for production deployment?

(I did a quick search and checked the readme and nothing popped up but I may have missed something while on my phone and commuting)