Some data on this page has not yet been manually verified against official sources. Fields marked "provisional" should be confirmed before citing.

Secure Software Standard

Active
Current version: 2.0 Source: pcisecuritystandards.org ↗

Version history

Version Status Published Retired Source
2.0 Active Jan 15, 2026 — ↗ provisional
1.2 Retired Dec 7, 2022 Jan 15, 2026 ↗ provisional
1.1 Retired — Dec 7, 2022 ↗ provisional
1.0 Retired Sep 1, 2019 — ↗ provisional

Supporting documents

Title Type Published Source
Secure Software v2.x Technical FAQs standard Jun 1, 2026 ↗ provisional
Secure Software v1.x Technical FAQs standard Jun 1, 2026 ↗ provisional
Secure Software Attestation of Validation Template template Feb 10, 2026 ↗ provisional
Secure Software Report on Validation Template template Feb 10, 2026 ↗ provisional
Secure Software Change Impact Template template Feb 10, 2026 ↗ provisional
Secure Software Standard standard Jan 15, 2026 ↗ provisional
Secure Software Standard – Sensitive Asset Identification standard Jan 15, 2026 ↗ provisional
Secure Software Standard Summary of Changes standard Jan 15, 2026 ↗ provisional
Secure Software Program Guide guidance Jan 15, 2026 ↗ provisional
Secure Software Report on Validation (ROV) Template template Apr 14, 2023 ↗ provisional
Secure Software Attestation of Validation (AOV) template Apr 14, 2023 ↗ provisional
SSF Glossary of Terms, Abbreviations, and Acronyms guidance Dec 7, 2022 ↗ provisional
FAQs for SSF v1.2 faq Dec 7, 2022 ↗ provisional
Transitioning from PA-DSS to the PCI Software Security Framework guidance Sep 1, 2021 ↗ provisional
FAQs for SSF v1.1 faq Aug 26, 2021 ↗ provisional
Software Security Framework Vendor Release Agreement guidance Sep 1, 2019 ↗ provisional
Software Security Framework At-a-Glance guidance Sep 1, 2019 ↗ provisional

Timeline