SAMMY has started out as a management tool for the OWASP SAMM model. However it has evolved in the past months to a platform that can support the complete quality management programme at your organization. SAMMY can work with any model whether it is a security-focused framework (e.g., OWASP SAMM, ISO 27001) or a more generic quality management framework (e.g., ISO 9001). The models we currently support are as follows:
All of the quality frameworks eventually boil down to a set of basic use-cases that SAMMY supports out-of-the box:
SAMMY is free tool, however we do require registration. You are not the product and we will take maximum care to ensure the privacy and security of your data. For the full terms of conditions please have look at this document: Terms of agreement