User Day

San Francisco SAMM & DSOMM User Day

We’re heading to San Francisco! Join us on November 4, 2026, alongside OWASP Global AppSec USA, for a full day of talks, discussions, and networking with the SAMM and DSOMM community.

We are currently accepting talk submissions. Submit your presentation.

Registration is available through the OWASP Global AppSec USA event page — look for the OWASP SAMM and DSOMM User Day option. Register here.


Vienna SAMM & DSOMM User Day — Thank You!

Thank you to everyone who joined us in Vienna, Austria on June 24 for the SAMM & DSOMM User Day. It was a fantastic day of learning, sharing, and connecting with the community.

This event brought together practitioners, teams, and experts working with SAMM and DSOMM to exchange real-world experiences, explore practical use cases, and discuss how these models are applied across different organizations and contexts.

Agenda

Here’s the line-up of talks and discussions for the day. Click any title for more details on the talk and the speaker.

Using OWASP SAMM and OWASP DSOMM together in practice Aram Hovsepyan, Timo Pagel
Cutting Through the Noise: Mapping Security Tools and Initiatives to DSOMM for Measurable Results John Smith
SAMM for Devs: What's in it for Me? Clemens Hübner
Connecting the dots: 5 lessons learned from an 8-year journey of an AppSec Program using SAMM Max Alejandro Gómez-Sánchez Vergaray
Beyond the Assessment: Charting a Security Future with SAMM Sunny Sharma
The SME Maturity Trap Koen Gilissen
From Maturity to Compliance: Using ISO/IEC 27034 to Close CRA Gaps in OWASP SAMM Nariman Aga-Tagiyev
Preparing for EU CRA: An overview of the concurrences and discrepancies between the prEN 40000 series and OWASP SAMM Lara Brito
Bridging Security Maturity and Regulatory Compliance: How SAMM Enables CRA Essential Requirements for FOSS Projects Nessim Kisserli
Round table: What's next for SAMM and DSOMM users All participants

As in previous editions, participants are invited to a sponsored dinner courtesy of Codific, SecureHabits, and Toreon.


Vienna SAMM Training

We also have a 1-day training during the OWASP Global AppSec EU event, on June, Tuesday 23. You can learn more about it here .



Archive

Here you can find the previous SAMM User Day pages with the full list of talks, downloadable material, and YouTube links.

2025 Washington DC User Day page 2025 Barcelona User Day page
2024 San Francisco User Day page 2024 Lisbon User Day page
2023 User Day page 2021 User Day page 2020 User Day page