Perform 3rd party software security review