Maintainability is the degree of effectiveness and efficiency with which a product or system can be modified by the intended maintainers.
- Analyzability
The ability to quickly assess the impact of changes, diagnose issues, and identify what needs to be modified.
- Modifiability
The ability to safely and quickly modify a system without causing defects or reducing quality or securability.
- Testability
The ability to verify that a system meets its requirements and is free of defects.
- Observability
The degree to which the internal state of a system can be inferred from its external outputs.
OWASP FIASSE
The Securable Software Framework: an attribute model with principles and processes to guide agentic software development (or manual software engineering) to secure outcomes.
SSEM identifies all the fundamental attributes that are the building blocks of securable software in an evolving landscape (FIASSE RFC Section 2.1). These attributes are not merely abstract concepts but represent tangible characteristics that directly contribute to its overall security and resilience.
Trustworthiness is the degree to which a system can be trusted to behave in a predictable manner
- Confidentiality
The ability to keep sensitive information secure and private.
- Accountability
The ability to uniquely trace actions to the responsible entity.
- Authenticity
The ability to confirm the identity of a user or system.
Reliability is the degree to which a system, product or component performs specified functions under specified conditions for a specified period of time
- Availability
The ability of a system to remain accessible and operational when needed.
- Integrity
The ability to ensure that a system's data is accurate and uncorrupted.
- Resilience
The ability to recover from failures and continue operating.
The detail and structure of the SSEM are designed to align with the realities of software development, focusing on creating systems that are securable and adaptable to future changes. The SSEM aims to enhance security, maintain developer velocity, and improve software systems' ability to adapt to a changing security landscape while maintaining usability and performance.
**For more information** on the Securable Software Engineering Model (SSEM) and its usage, please refer to the following:
Project Resources
Project Leaders
Alton Crossley
Project Information
Incubator Project
Classification
Standards
Language
Python
Latest Version
v1.0.6
Contributors
9
GitHub Stars
14
Downloads
11
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.