The FxCop ASP.NET security rules have finally been released after being used for quite some time internally. You can read more about it in this month MSDN magazine
on https://msdn.microsoft.com/en-us/magazine/gg490350.aspx
The rules are available on codeplex at https://fxcopaspnetsecurity.codeplex.com/