I need to write several passages of text in an offer to the client about the security layer in ASP.NET MVC web solution.
I am aware of security that comes along with MVC 3 and an improvements in MVC 4. But all of them are non conceptual, except for
AntiForgeryToken (AntiXSS) and built-in SQL Injection immunity (with a little of encoding needed by hand).
What would be the main point of ASP.NET security I can "show off" in an offer to the client?