Users.md

Users applying the MASVS and MSTG

Companies

Currently the MASVS and MSTG are used by at least the following companies:

• 7asecurity
• Brewsec
• Briskinfosec Technology and Consulting Pvt Ltd
• Citadelo
• Comsec
• continuumsecurity
• Cyber Ninjas
• ESCRYPT GmbH
• FH Münster - University of applied sciences
• Genexus & Genexus Consulting
• Hackenproof
• Infosec
• Lucideus Inc.
• Netguru
• NowSecure
• NVISO CVBA
• Randorisec
• Secarma
• Toreon
• VantagePoint
• Vertical Structure
• Websec Canada
• Xebia

Standards, frameworks and guidelines recommending the MASVS and MSTG

Currently, the MASVS and MSTG are recommended by:

• Egov standards for India
• Finish Transport and Communication Agency (TRAFICOM) - Assessment guideline for electronic identification services (Draft)
• Mobile Initiated SEPA Credit Transfer Interoperability Implementation Guidelines, including SCT Instant (MSCT IIGs)
• Vetting the Security of Mobile Applications: NIST Publishes SP 800-163 Revision 1

Application in scientific research

• STAMBA: Security Testing for Android Mobile Banking Apps

Books

• Hands-On Security in DevOps

Call for Users

Are you actively using the MASVS or MSTG and want to be listed here? File an issue on github, contact Sven Schleier (Slack: Sven), Jeroen Willemsen (Slack: jeroenwillemsen) or Carlos Holguera (Slack: Carlos), or send an email to Sven, Jeroen or Carlos.