The clients are all open source; the server isn't, but the last time I checked they plan to opensource it as soon as they make sure there aren't any major exploits someone could use against it. Which I know might sound silly, because the open source community could find and patch those, but in light of all the recent crypto-related security bugs lately, it makes you wonder if it is a wise decision after all.