What problem does it solve? Security teams and engineering leaders often lack a structured way to measure their application security program's maturity, identify gaps, and prioritize improvements. This Skill provides a complete OWASP SAMM v2 assessment framework covering all 15 security practices across 5 business functions. ## Core Features & Use Cases - Maturity Scoring: Score all 15 SAMM practices on a 0-3 scale across Governance, Design, Implementation, Verification, and Operations, with clear level definitions for each practice. - Roadmap Building: Generate 6-month and 12-month improvement plans tailored to organization size (startup, growing SaaS, enterprise), focusing on highest-value gaps first. - Security Champions Program: Get guidance on building a security champions program to scale AppSec expertise across development teams. - Use Case: A growing SaaS company preparing for SOC 2 uses this Skill to baseline its current maturity at 1.0, identify that SAST integration and threat modeling are its biggest gaps, and produce a phased 12-month roadmap to reach 2.0 in high-risk areas. ## Quick Start Assess my team's security maturity using OWASP SAMM and build a 6-month improvement roadmap for a 50-person engineering org.
