Penetration testing and file protection

Hi, Hope you guys can help me.

I will be potentially working on a website which will need protected files and sections of the website.
Will Contao stand up to penetration testing and is the file protection system safe enough to use to store private and confidential information?

Thanks,
Ste