Where can I find up to date hosting tips for Hidden Services?

I have an above basic understanding of web hosting and development, and have read all the documentation that I can find regarding hidden services and Endgame, but so far that is pretty much just basic setup guides.

I'm not planning on hosting anything that holds funds or facilitates financial transactions, but something personally important enough that I don't want to do it if it's going to be particularly vulnerable.

I am hoping some of you can help me find some additional information. Maybe frameworks, languages, and software to use or avoid, known vulnerabilities, and general best practices? What kind of server setups are best for high-traffic onion sites, that are likely to face malicious attacks?

Where can I find reputable penetration testers and people who will look for bugs with the latest attack methods?

Is there a forum or subtforum other than this where these things are regularly discussed? I understand there is a private section of tforum for donors, would I be more likely to find help there?

I can answer any question you may have, for no charge or anything. I'm also looking to start my own site at some point perhaps. And no, the /d/lounge isn't much in this case.

/u/codeislaw is a reputable pentester for hidden services. there are certain design principles that should be taken into consideration when you wanna code a web application to be used as Tor hidden service. You should understand the basic principles behind how Tor itself works, linux administration, system networking, et cetera. I have a guide which I will send you.

Thanks a million for your advice. I didn't get the guide yet, could you please DM it to me?