OWASP SAMM (Software Assurance Maturity Model) is a brand that provides an effective and measurable way for organizations of all types to analyze and enhance their software security posture. The mission of OWASP SAMM is to raise awareness and educate organizations on designing, developing, and deploying secure software through their self-assessment model. SAMM supports the entire software lifecycle and is agnostic to technology and process.

The OWASP SAMM community consists of security knowledgeable volunteers from businesses and educational organizations. This global community collaborates to create freely-available articles, methodologies, documentation, tools, and technologies. SAMM is a prescriptive and open framework that is simple to use and fully defined.

It helps organizations analyze their current software security practices, build a security program in defined iterations, show progressive improvements, and define and measure security-related activities. With its flexibility, SAMM is customizable for small, medium, and large organizations using any development style. The structure of SAMM is based on 15 security practices grouped into 5 business functions, each containing activities structured into 3 maturity levels.

SAMM provides a roadmap for organizations to assess their current security posture, define their target, and implement an implementation plan for improvement. Join the OWASP SAMM community and take advantage of the resources and guidance available to enhance your software security