WordPress Security Request

Hi All,

I have recently had someone request form me some form of documentation on how secure wordpress is for example acunetix testing. I am trying to find out if worpress undergoes any security analysis and reporting and if so where can I get those documentation.

From my experience the site that usually get hacked are from weak passwords or unsecured post in badly built templates.

Any Information will be great.