appsec-maturity

A practical AppSec maturity model: five stages, self-assessment included

OWASP SAMM v2 scores 15 practices on a 0–3 scale; BSIMM15 measured 121 firms and found SCA adoption up 67%. Here's a five-stage model to self-assess against.