If you're looking to see if a user can find your security flaws, there are numerous security firms out there one can hire that will perform this type of service, depending on how serious you are. They most certainly aren't cheap, but effective.

More to the point, if you already know the problem, why haven't you corrected it?