thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

OWASP DevSecOps Maturity Model (DSOMM)

An OWASP model that defines security activities for DevOps pipelines and rates their implementation across maturity levels.

Definition

DSOMM groups activities into dimensions such as Build and Deployment, Culture and Organization, Implementation, Information Gathering, and Test and Verification, each with levels 1 to 4. It helps teams prioritize which pipeline security controls to add next. It complements SAMM with a pipeline-specific focus.

Example

A platform team uses DSOMM to decide that signed artifacts and SBOM generation are its next level-2 goals.

Exam tip

Recognize DSOMM as pipeline-focused maturity guidance, distinct from the organization-wide SAMM.

Related terms