Framework · Last verified
Minimum Viable Secure Product
Minimum Viable Secure Product is a public-domain security baseline checklist for enterprise-ready products, published under a CC0 license. A multi-company working group — including Salesforce, Google, Okta and Slack — maintains it, and it carries no independent audit or accreditation mechanism.
- Class
- Framework
- Owner
- MVSP Working Group
- Last verified
What it is
"A minimum security baseline for enterprise-ready products and services"
A self-applied checklist of baseline security controls, not a certification scheme — the source page describes no independent audit or accreditation mechanism.
Who owns it
Maintained by the MVSP Working Group, a multi-company group listed on the source page (including Salesforce, Google, Okta, Slack, Vanta, Netflix and CISA) — not a single owning institution.
"MVSP and its translations are public domain under CC0 1.0 Universal license."
Sources
- Minimum Viable Secure Product — home page ↗ — accessed
Last verified:
This page is for information only; it does not accredit, certify or endorse any organisation. Requirements and programs change — always confirm against the primary source linked above.