What is the NIST SSDF?
The NIST Secure Software Development Framework (SSDF) is a set of practices for building software securely. It is not mobile-specific, but its practices, including testing the software and reviewing it for vulnerabilities, apply directly to mobile apps.
How Mobexa helps
Mobexa supports the SSDF practices that call for testing and reviewing software for vulnerabilities. It runs on every build, returns findings as SARIF, and keeps the evidence that shows the practice is followed, not just promised.
Common questions
Is the SSDF mandatory?
The SSDF is a framework of recommended practices. Some procurement and government contexts reference it. Mobexa supports the testing and vulnerability-review practices within it for mobile apps.
Mobexa maps every finding on your Android and iOS builds to NIST SSDF and the other standards an auditor recognises.
Start Free Trial