This just seems like a mailing list for CVE alerts for popular software. If you put in HN, it'll say that it failed to detect the stack, and then ask you to choose your software and then enter your email to receive alerts.
It's kind of clever marketing, giving people a sense that they're going to get a security audit in exchange for an email address.
It's kind of clever marketing, giving people a sense that they're going to get a security audit in exchange for an email address.