(...)
open source codes are vulnerable to attacks, i.e. why it is hidden and cwp is not a open source software.
The old "security by obscurity".
This is absolutely not true.
If you need you code be more secure, you *must* open it, and submit it to criticisms.
Without doing so, you always get a false sense of security.
Myself already report holes, without know anything of the panels's code.
Regards,
Netino