We are having a new site developed by outsourced programmers and would like to have the code reviewed for any "security" issues before going live.

What is the best way to do this?