DeVOps vs DevSecOps

What are differences and similarities between DevOps and DevSecOps

DevOps discipline focus on efficiency.

DevSecOps is built on above but integrate security specifically in Cloud

DevOps discipline bridge gap between development and operations.

As number of cyber attacts are increasing and companies have additionals ecurity concerns on cloud, DevSecOps is set of practices to ensure applications built on cloud are secure and running efficiently on cloud

DevOPs mostly focus on

  1. automation

  2. monitoring for downtime, issues

  3. deployment

  4. Continious testing and deployment CI/CD pipeline

In addition DevSecOps focus on

  • Security

  • Vulnerabilities

  • Monitoring for cyber attacks

To do these activities include scanning code for vulnerabilities

  • before developer check in code , they run checks

  • At time of code check in - automatic scan are run

  • At time of build checks are triggered

  • At time of test pass, automated test include these