The Framework

Building a Security Automation Capability

The MITRE Security Automation Framework provides a complete lifecycle approach to security automation, from initial project planning all the way through operational monitoring. Approaching security automation through a refined and field-tested framework will help you achieve your security goals more efficiently.

Browse Security ContentView SAF Tools

The Five Pillars

A Complete Security Automation Lifecycle

Each pillar addresses a specific phase in the security automation journey. Jump in at any point or follow the complete workflow.

Plan

Identify security requirements and locate applicable guidance for your technology stack

Harden

Apply security configurations and controls using automated hardening content

Validate

Test security controls with automated validation using InSpec profiles

Normalize

Convert security scan results into a common format for analysis

Visualize

View and analyze security posture through dashboards and reports