It is impossible to assess something like this without a full understanding of all the capabilities and the functionality of the software. I suggest you open beta testing of the software once it's completed.
Also, a bug bounty campaign or evaluation by a respectable security team would also be prudent for this kind of software.