April 1, 2026 - Benchmark your AppSec program with BSIMM assessment services from Black Duck. Get data-driven insights from 100+ organizations, identify security gaps, and build a customized Maturity Action Plan (MAP) to advance your software security posture. Trusted by industry leaders worldwide.

September 2, 2025 - Support for Maturity Growth: BSIMM helps organizations assess their current maturity level and provides a clear roadmap for progressing.

October 29, 2020 - SAMM also provides a number of resources including quick start guides and the toolbox to aid in capturing and measuring assessments. If you would like a third-party to conduct an assessment, you could go with Synopsys to conduct a BSIMM assessment or one of a number of different consulting companies that would conduct a SAMM assessment.

February 13, 2026 - The assessment process systematically examines your current security practices across all four BSIMM domains—Governance, Intelligence, SSDL Touchpoints, and Deployment—to create a detailed profile of your software security initiative.

February 13, 2024 - The Building Security In Maturity Model (BSIMM) is a powerful tool that organizations can use to assess the maturity of their software security initiatives. It's not just a theoretical model—it's based on the real-world practices of top companies. I was fortunate enough to be involved in ...

November 28, 2017 - The Building Security In Maturity Model (BSIMM) has been used successfully for years by the software security company Cigital to measure the software security

March 12, 2026 - The BSIMM is a software security framework used to categorize activities to assess security initiatives.

October 1, 2025 - BSIMM comes with an objective assessment of the different activities in 130 organizations from 8 industry verticals (financial services, independent software vendors, technology, healthcare, cloud, Internet of Things, insurance, and retail).

October 2, 2018 - The BSIMM is the Building Security In Maturity Model. It compiles all the observations collected from BSIMM assessments (analyses of individual organizations) and draws conclusions about best practices, how real-life SSIs mature and evolve, ...

BSIMM is not a standard or a checklist but rather a reflection of current practices observed in real-world software security programs. By assessing the software security initiatives of multiple organizations, BSIMM offers a benchmark for comparing and guiding software security practices...

March 8, 2018 - I met with dozens of organizations ... If you’re not familiar with BSIMM, here’s the deal: It’s a research study and strategic decision-making tool ......

June 8, 2018 - The first version of BSIMM was built in 2008. It collects statistics based on the assessment of a large number of enterprises and categorizes the statistics to form a software security model that can be used for assessments.

December 12, 2025 - Automated tools for static analysis, dependency scanning, secrets detection, and security testing reduce manual effort while improving consistency and coverage. Use BSIMM assessment results to demonstrate security maturity in client-facing materials: RFP responses, security documentation, vendor assessment questionnaires, and client presentations.

Based on research with companies such as Aetna, HSBC, Cisco and more, the Building Security In Maturity Model (BSIMM) measures software security.

September 26, 2025 - SAMM also provides a number of resources including quick start guides and the toolbox to aid in capturing and measuring assessments. - If you would like a third-party to conduct an assessment, you could go with Synopsys to conduct a BSIMM assessment or one of a number of different consulting companies that would conduct a SAMM assessment.

BSIMM results provide a way to assess the current state of your software security initiative, identify gaps, prioritize change, and determine how and where to apply resources for immediate improvement.

The BSIMM is a “what works” report on building and evolving an SSI. It comprises · proven activities that mature organizations are performing today. You can use your · assessment results, the BSIMM activities, and your objectives to set strategies and

“I was amazed by how quickly Varonis was able to classify data and uncover potential data exposures during the free assessment.