Skip to main content
Stripe SystemsStripe Systems
Free Tool · No Signup · ~7 minutes

DevOps Maturity Matrix Assessment

Score your engineering organisation on a CMMI-style 5-level scale across 8 industry-standard dimensions. Get a radar-chart profile, prioritised improvement areas, and an optional emailed report — all in your browser.

How mature is your DevOps practice?

This assessment uses a CMMI-style 5-level maturity model across 8 dimensions (32questions, ~7 min). At the end you'll see a radar chart of your profile, prioritised improvement areas, and a level-by-level path to advance — plus an option to email yourself the full report.

🤝Culture
🚀CI/CD
📐IaC
📊Observability
🔒Security
📦Release
☁️Cloud-Native
🛡️Reliability

Free · no signup required to see your results · email is optional

Methodology

Scale. The five maturity levels are derived from CMMI (Capability Maturity Model Integration) and applied to DevOps engineering practice: Initial (ad-hoc), Managed (basic process), Defined (standardised), Quantitatively Managed (metrics-driven), Optimizing (continuously improving).

Dimensions. The 8dimensions are drawn from Google's DORA, Microsoft's DevSecOps maturity work, the OpenSSF SLSA framework, and the CNCF cloud-native landscape. Each is independently scored to surface lopsided profiles (e.g. strong CI/CD but weak observability is a common pattern).

Scoring. Dimension score = average of the 4 question scores. Overall score = average of dimension scores. Recommendations are generated from your three lowest-scoring dimensions and target the next maturity level — the right unit of progress is a single level shift, not a leap.

Limits. Self-assessment is sensitive to optimism bias. For investment-grade results, run the assessment with three engineering leaders independently and compare; gaps indicate weak shared understanding.

What you'll be assessed on

🤝Culture & Practices

DevOps mindset, dev–ops collaboration, blameless culture, and operational practice maturity.

🚀CI/CD & Automation

Continuous integration, automated testing, and deployment pipeline maturity.

📐Infrastructure as Code

Infrastructure provisioning, environment parity, and configuration management.

📊Observability & Monitoring

Logging, metrics, distributed tracing, and SLO discipline.

🔒Security & Compliance (DevSecOps)

Shift-left security: SAST/DAST, secrets, dependency scanning, and compliance automation.

📦Release Management

Deployment strategies, feature flags, rollback capability, and change management.

☁️Cloud-Native Adoption

Containerisation, orchestration, serverless, and modern cloud-native architecture patterns.

🛡️Reliability & Resilience

Chaos engineering, disaster recovery, MTTR, and architectural resilience.

Frequently Asked Questions

What does this DevOps maturity assessment measure?

It scores your engineering organisation on a CMMI-derived 5-level scale (Initial → Managed → Defined → Quantitatively Managed → Optimizing) across 8 industry-standard dimensions: Culture & Practices, CI/CD & Automation, Infrastructure as Code, Observability & Monitoring, Security & Compliance, Release Management, Cloud-Native Adoption, and Reliability & Resilience. There are 4 diagnostic questions per dimension (32 total), each with 5 plain-English level descriptions to anchor your self-assessment.

How long does the assessment take?

About 7 minutes for an experienced engineering leader. Reading the level descriptions carefully gives more accurate results — there's no value in rushing.

How are scores calculated?

Each question is answered on a 1–5 scale. The dimension score is the average of its 4 question scores. The overall maturity score is the average across the 8 dimensions. We then surface your top 3 strengths, your bottom 3 improvement areas, and prescriptive guidance for moving each weak dimension up by one level.

Is my data stored or shared?

Your answers stay in your browser unless you choose to email yourself the report. If you do, your email + answers + computed scores are sent to our Cloudflare Pages Function, which generates a formatted HTML email and dispatches it via Microsoft Graph. No third-party analytics service receives your responses; nothing is sold or shared. You can delete the email at any time.

How is this different from DORA / SPACE / CALMS?

DORA focuses on four delivery-performance metrics; SPACE on developer productivity; CALMS on culture-first values. This matrix is broader and prescriptive — it tells you not just where you stand but exactly which level to target next per dimension and the concrete moves to get there. If you already track DORA, the metrics show up here as one of the four Culture & Practices questions.

Who is this assessment for?

Engineering leaders (CTOs, VPs of Engineering, Directors, Heads of Platform / SRE) who want a structured, evidence-based view of where their organisation stands and a defensible roadmap for improvement. Also useful for Stripe Systems clients to align on baseline before we engage.

Can I share my report with my team?

Yes. The on-screen results page is fully shareable via screenshot. The emailed report is a self-contained HTML email you can forward. We don't put anything behind a login.

32 questions across 8 dimensions. Used by engineering leaders to align on baseline and chart improvement priorities.

Want help executing on the recommendations?

Stripe Systems' DevOps and platform engineers help organisations move up the maturity curve with concrete artefacts — IaC modules, CI/CD pipelines, observability stacks, runbooks. Send us your report and we'll come back with a 90-day roadmap.

Discuss your roadmap →