Given Apple's almost unlimited cash they could always make companies like this an offer no intelligent person could turn down (especially if public) and have them explain what they do.
I wonder, is Apple hiring such companies to poke holes at its OS before it gets out of beta, or even after it's launched? Because if not, maybe they should.
http://www.engadget.com/2016/02/03/apple-legbacore-thunderst...
"All was quiet after the researchers' announcement, and for good reason: Apple purchased their security firm -- LegbaCore -- just two months after news of Thunderstrike 2 broke. According to the company's founder Xeno Kovah, the team is going to be working on "low-level security" at Apple, which we'll take as shorthand for making sure that OS X's firmware is less susceptible to attacks in the future."