DevSecOps
Technology & Computing abbreviation · Cybersecurity
| Stands for | Development, security and operations |
|---|---|
| Categories | Technology & Computing |
DevSecOps stands for Development, security and operations, a cybersecurity abbreviation.
The practice of building security into every stage of the DevOps software lifecycle, automating checks such as code scanning, dependency analysis and infrastructure policy tests inside CI/CD pipelines so issues are caught early.
Example: Under DevSecOps, a pull request can't merge if the scanner finds a critical vulnerability.
Usage notes
"Shift left" describes moving security earlier in development. Typical tools include static and dynamic testing, software composition analysis and secrets scanning. The approach stresses shared responsibility between developers, security and operations rather than a final security gate. Sometimes written SecDevOps.
Related abbreviations
More cybersecurity abbreviations
- CVSS – Common Vulnerability Scoring System
- CWE – Common Weakness Enumeration
- DAC – Discretionary access control
- DAST – Dynamic application security testing
- DDoS – Distributed denial of service
- DES – Data Encryption Standard
- DFIR – Digital forensics and incident response
- DH – Diffie-Hellman (key exchange)
- DKIM – DomainKeys Identified Mail
- DLP – Data loss prevention
- DMARC – Domain-based Message Authentication, Reporting and Conformance
- DoS – Denial of service