Skip to content

What is DevSecOps? Definition and explanations

DevSecOps builds security into the development and operations cycle rather than treating it as a final gate. In practice: dependency and code scanning in the CI chain, secrets kept out of the repository, verified container images, configurations checked before deployment. The aim is to catch defects while they are still cheap to fix.

In one sentence

DevSecOps builds security checks into the delivery chain rather than bolting them on at the end.

Related terms

Sources and references

Glossary