[otrs] security in OTRS

In order to put OTRS on the outside of our firewall, or let traffic pass through to the OTRS system, they require it to be secure. Is there any sort of formal testing or security documentation about the security of OTRS 2.4.5 or other versions running on apache? Say security vulnerabilities checked for by a third party security-checking tool? Thanks, Peter peter.sharp@xerox.com