SAMMY
Codific v1.0.0
Security maturity insights
From the developer
Declared capabilities
- List security maturity assessments and their scores
- Explain OWASP SAMM and other framework requirements
- Review products, threats and threat modeling events
Declared limitations
- Write request: the app is read-only and must not claim to change data
- Delete request: no tool can delete anything
- Unrelated request: SAMMY tools should not be triggered
Not specified in the available declarations: pricing & account requirements.
Onboarding example
Which security maturity assessments does my organization have in SAMMY?
Sources & dates
Developer declarations; not independently tested. Listing last checked Nov 12, 2026. Package observed Nov 12, 2026.
Description
From the marketplace listing
SAMMY is Codific's platform for software security maturity assessments, threat modeling, supplier security and control management, built around OWASP SAMM and other frameworks such as ISO 27001, NIST SSDF and DSOMM. Connect your SAMMY account to ask questions about your organization's security program in plain language: - List your assessments and see overall and detailed maturity scores per business function, security practice and maturity level. - Review the answers, remarks and status of each assessment stream. - Look up framework guidance: what a practice, stream or activity expects at each maturity level. - Explore your projects, products, their risk scenarios, threats and threat modeling events. - Review your suppliers and their assessment progress, and your control implementations with owners and linked framework elements. The connection is strictly read-only: nothing in SAMMY can be created, changed or deleted from ChatGPT. You sign in with your own SAMMY account and approve the connection on SAMMY's consent screen; ChatGPT then sees only what your account is allowed to see. Requires a SAMMY organization whose plan includes the MCP integration, with the API and MCP integrations switched on by a platform manager.
Language: English · Automatically detected from descriptions.
Changes
No changes recorded yet. Follow this plugin to keep track of future changes.
First seen Nov 9, 2026. Last seen Nov 12, 2026.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Find HiHello business cards, inspect card details, analyze card performance, view events, and retrieve QR export links.
Shared terms: insight, organization, event, plain
-
Work with your Oneleet security and compliance workspace: controls, monitors, evidence, policies, risks, vendors, access reviews, devices...
Shared terms: security, assessment, control, framework
-
Prepare account briefs and analyze coaching scorecards using Airspeed evidence.
Shared terms: insight, assessment, organization, practice
-
Connect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance statu...
Shared terms: security, control, framework, iso
-
Aevral is an AI security reviewer for GitHub pull requests. Setup skill for the Aevral GitHub App: reviews look for access control, busin...
Shared terms: security, control, organization, per
Files & skills
File archives
Release notes
Initial release: read-only access to SAMMY assessments, scores, frameworks, projects, products, threat models, suppliers and controls.
Declared in the saved package. Remote tools may change independently.
Package details
Publisher declarations from the archived package. These are separate from our research and the live service's terms.
- Package author
- Codific
- Commerce declaration
- Does not support commerceThis does not establish whether access is free or paid.
- Review scenarios
- 5 positive · 3 negativeScenario counts, not test results.
Declared capabilities
- List security maturity assessments and their scores
- Explain OWASP SAMM and other framework requirements
- Review products, threats and threat modeling events
- Review suppliers and control implementations
Package observed Nov 12, 2026.
Technical details
- First seen
- Nov 9, 2026 · 18:00 UTC
- Last seen
- Nov 12, 2026 · 18:00 UTC
- Collection status
- Collected
plugin_asdk_app_6ae0c490312c8191bd5a5b41bacc46f6
Download plugin data (JSON)Plugin details: served from cache. Prepared . Refreshed when plugin data changes or after 6 hours. Your account and Follow status are live.