Notes

The objective of the Open Source Security Testing Methodology Manual (OSSTMM) is to establish a professional standard for security testing in any environment, covering the testing of events from the outside to the inside. OSSTMM is a document that defines a set of rules and guidelines for conducting security testing, specifying what events to test, when to test them, and how to test them.

OSSTMM methodology primarily focuses on external security testing, which involves testing security from an unprivileged environment to a privileged environment or location, to circumvent security components, processes, and alarms to gain privileged access. However, it also provides a standardized approach to conducting a thorough security test of each section of the security presence of an organization.

By providing an open, peer-reviewed approach for a thorough security test, OSSTMM aims to achieve an international standard for security testing that can be used as a baseline for all known and unknown security testing methodologies.