Security Architecture, Open Source Free security patterns and control mappings for enterprise architects. Used by security professionals worldwide since 2008. Browse Patterns Control Catalogue Assess Your Maturity 39 Security Patterns 191 NIST Controls 7 Framework Mappings 17+ Years Active Featured Patterns SP-029 51 controls Zero Trust Architecture SP-039 28 controls Client-Side Encryption and Data Privacy SP-034 37 controls Cyber Resilience SP-030 45 controls API Security SP-012 26 controls Secure Software Development Lifecycle SP-032 33 controls Modern Authentication View all 39 patterns → How Mature Is Your Security Architecture? Assess your organisation against OSA patterns. Get a maturity score, radar chart visualisation, gap analysis, and see how you compare to industry benchmarks — all free, all encrypted client-side with AES-256-GCM. We cannot read your scores. Start an Assessment My Assessments NIST 800-53 Rev 5 Control Families Access Control Awareness and Training Audit and Accountability Security Assessment and Authorization Configuration Management Contingency Planning Identification and Authentication Incident Response Maintenance Media Protection Physical and Environmental Protection Planning Personnel Security Personally Identifiable Information Processing and Transparency Risk Assessment System and Services Acquisition System and Communications Protection System and Information Integrity Supply Chain Risk Management Full catalogue includes mappings to ISO 27001:2022, ISO 27002:2022, COBIT 2019, CIS Controls v8, NIST CSF 2.0, SOC 2 TSC, and PCI DSS v4.0.1. Open Source, Open Standards All OSA content is released under CC BY-SA 4.0. Use it in your security architecture practice, contribute improvements, or build tools on top of our structured data. View on GitHub