Okami Maturity docs
★ GitHub
PT EN
Docs / Guides / SAMM beyond spreadsheet
// guide · SAMM

OWASP SAMM assessment beyond the spreadsheet

AppSec maturity still lives in a spreadsheet.

The official model (OWASP SAMM) ships a toolbox in Excel and Google Sheets. It works. It also stalls: a forked version, a broken cell, a scorecard nobody updates after the first round.

We see the same pattern on teams that already have scan, policy, and tickets: the board asks “how is our SAMM?” and the answer becomes an improvised slide.

Start 7-day free trial → See the product
i
7 days free · 1 SAMM run

Okami cloud or self-host. Same assessment: 90 questions, a live scorecard, and a roadmap. No extra slide for the board.

// 01 · the model

What SAMM v2 actually asks for

OWASP SAMM organizes a secure SDLC into 5 functions, 15 practices, and questions per activity. In Okami Maturity: full SAMM v2 — 90 questions, a live scorecard, and a roadmap. The model is OWASP; the product is the flow: answer, see the score, leave with a roadmap.

// 02 · comparison

Spreadsheet vs tool

The official toolbox is useful offline. OWASP lists online options. Okami Maturity: Okami cloud or self-host, same assessment. Company $19.90/month or $199/year. Consultant $79.90/month or $799/year.

Spreadsheet (official toolbox)
Okami Maturity
Excel and Google Sheets — useful offline
Okami cloud or self-host, same assessment
A forked version, a broken cell
Full SAMM v2 — 90 questions
A scorecard nobody updates after the first round
A live scorecard by function and practice
The board answer becomes an improvised slide
A roadmap for the quarter
// 03 · flow

How to start

1Cloud or self-hostThe same assessment in both editions.
21 real SAMM assessmentNinety questions from the model, not a parallel checklist.
3Scorecard by function and practiceThe score updates as you answer.
4Roadmap for the quarterThe gap to target becomes the next step.

Trial: 7 days free · 1 SAMM run.

Start 7-day free trial → Back to docs
// 04 · sources

OWASP SAMM sources