Concrete5 Security

Permalink
I am about to prepare a web site Security related document for a possoble new customer.

In general, I am wondering about the Security model, and how secure the resulting web site is when it's based on Condrete5 framework.

Has anyone else prepared such a Security related document from before? Describing all the details in the Security model etc.

I'm now on version 8.4.4. Perhaps an idea to think about upgrading to 8.5.0 due to improved security elements?

Janks