Security is very important to concrete5.

As a developer who uses concete5 to build web applications, you'll need to ensure that your code is secure. Fortunately, concrete5 contains a number of helper libraries and functions to ensure writing secure code is possible and easy to do.

• Protect Against Cross-Site Request Forgery with the Token Validation Library.
• Protect Against Cross-Site-Scripting with Output Filtering and Sanitization.
• Use concrete API or doctrine placeholders to guard against SQL injection.
• Validate file uploads.
• Sanitize user inputs.
• Encrypt sensitive data.
• Use Anti-spam & Captcha in public forms.