I'm wondering whether or not a professional security audit would be a good investment. While we're working hard to build a very secure system, I think an outside perspective could help us identify threats we hadn't considered.
What sort of price are you looking to pay? I've written a lot of secure software in the past, and I may well be able to recommend a couple of firms who have done a similar job for me but I'm afraid they don't come terribly cheap.