Microsoft SQL Server Runs the Security Table
In my opinion, SQL Server 2000 SP3, SQL Server 2005 and IIS6 have been the poster-children for SDL. Enterprise Strategy Group just released a research paper comparing the security of SQL Server with Oracle and MySQL.
And no, this was not commissioned by Microsoft!