OWASP SAMM

A Software Assurance Maturity Model (SAMM) that provides an effective and measurable way for all types of organizations to analyse and improve their software security posture.

About OWASP SAMM

Project Leaders

Seba Deleersnyder

Email

Bart De Win

Email

Project Information

Flagship Project
Classification
Standards
Language
Markdown, HTML, and JavaScript
License
CC-BY-SA-4.0
Latest Version
2.2.0
Contributors
25
GitHub Stars
109
OWASP Logo
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.