[vadivlkumar]

To be honest, being a guy in both lands for living, ASP.NET is much more to offer as a base framework that worries about security.

Obviously, now and then security vulnerabilities opens up, in all such occasions RoR prompts before you think about MS patch! It is something to do with MS release cycles, even though you can fix it as most of this frameworks (ASP.NET MVC or Web Api) are opensource ones.

I think your question is open ended that you cannot expect one answer.

For example, if you're worried about SQL Injections it is purely a framework like Entity Framework or NHibernate is to question about or in other cases how you're dealing with SQL queries (Are you using StringBuilder to build your query yet?) otherwise there are answers in both the land for every known security issues.

[tptacek]

Idiomatic code on both Rails and .NET is about equally likely to harbor SQL injection vulnerabilities.