SF² aims to help you scale SecOps wisely 

The report introduces the Software Factory Security Framework (SF²), a strategic, open-source approach to scaling software security by focusing on resource allocation over headcount. It outlines four components—universal stewardship responsibilities, a context-aware strategic positioning tool, an investment portfolio mindset prioritizing automation and reusable capabilities, and a contextual adaptation guide—and contrasts benefits with critiques from industry experts. Commentators note SF²’s strengths in strategic alignment and scalability across organizational sizes, its positioning above standards like NIST SSDF, OWASP SAMM, BSIMM, and ASVS, and its gaps in unifying dev/runtime security, addressing human factors like burnout, and applicability to hardware/OT or air-gapped environments.