OWASP SAMM
About SAMM
  • What is SAMM
  • The team
The Model Docs Blog
Community
  • User Day
  • SAMM Users
  • Practitioners
  • Sponsors
  • Benchmark
Getting Started
Step 1: Prepare
Step 2: Assess
Step 3: Set the Target
Step 4: Define the Plan
Step 5: Implement
Step 6: Roll Out
Fundamentals Course
In Depth
Defining Scope
Roles & Skills
Assessment Guide
Conducting Interviews
Example Interview Questions
Overview
SAMM to Assignments
Assignment Profiles
FAQ
Mappings
Assessment Tools
SAMM PDF
How to Contribute
GitHub Repositories
SAMM Agile Guidance
Stream Guidance
The Model
Docs

Guidance

Practical guidance for specific contexts, including Agile adoption and community contributions.

SAMM Agile Guidance

How to implement SAMM security practices in an Agile environment: best practices, pitfalls, and practical examples

Stream Guidance

What SAMM guidance documents are, how they relate to model streams, and how to contribute

OWASP

This is an OWASP project. OWASP is an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted.

Navigation

  • About SAMM
  • The Model
  • Docs
  • Assessment

Help

  • FAQ
  • Contributing
  • Contact

Connect

  • GitHub
  • Slack
  • LinkedIn
  • YouTube
  • Meetup

OWASP SAMM is published under the CC BY-SA 4.0 license and we share the OWASP Privacy Policy.

We use analytics cookies to understand how visitors use this site. See our privacy policy.

Cookie preferences

Necessary

Required for the site to work. Cannot be disabled.

Always on
Analytics

Helps us understand how visitors use the site (Google Analytics and Scarf page-view pixels on SAMM model pages). No personally identifiable information is collected.