What is DevSecOps?

DevSecOps stands for development, security, and operations and the collaboration of these areas to deliver secure applications. Its principles were established shortly after defining the DevOps process and methodology. The idea is the same, applying the shift-left mindset in security in an analogous way to how we have applied the shift-left mindset in quality assurance and later in operations. It is a framework that integrates security into all phases of the SDLC and, in that sense, it is an evolution in the way software development organizations approach security by introducing a security-first mindset culture and automating security into every phase of the software development life cycle from design to delivery. Organizations widely adopt this approach to reduce the risk of releasing code with security vulnerabilities to avoid not just reputation loss but also the high financial impacts of such failures.

If we look back at the main phases of the SDLC that we...