Security Architecture,
Open Source

Reusable security patterns, control mappings, and capability models that help you design proportionate, consistent, and traceable security — across every system in your estate. Trusted by security architects in 190+ countries since 2008.

Security Patterns Capability Model New Control Catalogue Assess Your Maturity
New Map your own controls to any of 90 frameworks, from NIS2 to SOC 2 →
54
Security Patterns
317
NIST Controls
90
Framework Mappings
17+
Years Active

Featured Patterns

SP-030 New 47 controls

API Security

Now includes ArchiMate diagrams contributed by the Cyber Security Coalition.
SP-029 51 controls

Zero Trust Architecture
SP-044 32 controls

SaaS Identity Lifecycle Management
SP-033 28 controls

Passkey Authentication
SP-050 38 controls

Mobile Security Architecture
SP-013 33 controls

Data Security Pattern
View all 54 patterns →

How Mature Is Your Security Architecture?

Assess your organisation against OSA patterns. Get a maturity score, radar chart visualisation, gap analysis, and see how you compare to industry benchmarks — all free, all encrypted client-side with AES-256-GCM. We cannot read your scores.

Start an Assessment My Assessments

Free Policy Templates

NIST-mapped, concise, and modern — covering AI, cloud, BYOD, and remote work. Download in Markdown format, free for registered users.

Information Security Policy

20 sections from governance to compliance

Acceptable Use Policy

10 sections for staff and third parties

Open Source, Open Standards

All OSA content is released under CC BY-SA 4.0. Use it in your security architecture practice, contribute improvements, or build tools on top of our structured data.

View on GitHub