On http://expressionengine.com/overview/ it says:
Security and Stability
In 10 years ExpressionEngine has never had a major security breach. We take security very (very) seriously, perform continuous audits, and respond to issues with security implications immediately.
Are there any certificates or sources to back this up somehow? I would want to have something at hand to show clients if needed.
Thanks!