For mature frameworks / libraries built with security in mind for doing Web applications in C, have a look at :
What is particularly “scalable” about Kore? I read through the documentation and it seems like a standard shared-nothing HTTP framework.
Are there performance benchmarks for this? Writing something in C doesn’t necessarily mean it’ll run faster than if it were written in eg: LuaJIT, especially if the C code isn’t written with cache efficiency in mind. And GLib is (or was the last time I used it) very pointer-fetchy.
Hopefully it’s a lot faster than “hundreds of requests per second”, the stat touted on the site.
The author says he is planning to publish some benchmarks.