OWASP Slack may be a good place to ask. In my experience the quality of answers there is pretty high: https://owasp.org/slack/invite

YMMV though.