I left nop since 3.3 and now potentially will start some new projects in nop again. Just got a quick question from stack holder about security.

Has any penetration test been done on nopCommerce? And beside PCI DSS, are there any other security certificates that nopCommerce comply to?