Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Secure Software Development Framework

Secure Software Development Framework SSDF

Publications

The following NIST-authored publications are directly related to this project.

Series & Number Title Status Released
SP 800-218 Rev. 1 Secure Software Development Framework (SSDF) Version 1.2: Recommendations for Mitigating the Risk of Software Vulnerabilities Draft 12/17/2025
SP 800-218A Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile Final 07/26/2024
SP 800-218 Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities Final 02/03/2022

Additional Pages

References

Contacts

SSDF Inquiries
[email protected]

Created February 25, 2021, Updated February 27, 2025