OWASP Security Culture
This project aims to help organizations tailor their security efforts so developers can consistently build secure software. Version 2 introduces SECUR-E, an open framework based on COM-B and DASP research, to identify whether barriers to secure development stem from capability, opportunity, or motivation. Users can then select targeted interventions. Features include self-assessment, scoring, persona guidance, team visualizations, playbooks, and progress tracking to support better security culture. Personas reflect current conditions, not fixed identities. Results should never be used for hiring, performance, or disciplinary decisions. The framework is under expert review and community testing.
Starting question
“What would actually help me build more secure software?”
Explore your current conditions privately.
Complete the survey, calculate three scores, and read the profile shape before any persona description. Decide what—if anything—you want to share.
In 30 minutes: Read the confidentiality notice, complete D2, self-score and inspect your CAP/OPP/MOT shape.
In one week: Read the closest D6 persona-pattern section, including the transition pathway and “what not to do.”
In one month: Use Reflection 3 as an advocacy note or volunteer for a team session or cognitive interview.
Keep in mind: This is a snapshot, not an identity. Do not classify colleagues by observation.
A private 30-minute path
For developers, security champions, managers or practitioners who want to experience the framework before involving anyone else.
(5 min) Read: Read D2’s instructions and confidentiality blocks. Answer how things are—not how they should be.
(15 min) Complete: Answer Sections A-D and add short Section E reflections. Section A is optional.
(5 min) Score: Reverse-score the listed items, sum each section and assign bands using D3.
(5 min) Interpret: Look at the profile shape, confidence and closest D6 pattern. Read the contraindications.
Private by design: This static website does not collect assessment responses. Download the survey and keep your answers locally unless you deliberately choose another arrangement.
Download the assessment
Download scoring guidance
Project Resources
Project Information
Slack