Welcome to the SecOps Thursday email!
More like the hopefully regular weekly newsletter.
This newsletter is going to be a mix of curated articles and original content about this new SecOps, or DevSecOps world.
I know this is more of a new buzzword, but now there is a real opportunity to make security more than an afterthought in the product’s release process.
The development lifecycle is changing, and software engineers are taking on more and more responsibilities that used to be out of their job description. So why not? Developers are smart, right?
If not so long ago, security had been something that was cast aside; organizations are much more open to letting security become part of the development pipeline. This is where SecOps comes in to play - just like code quality and stability, you can get security related feedback as early as possible.
Anyway, the first issue is more on the application security side, but don’t worry, we are going to get our hands dirty with containers, kubernetes, static analysis, CI / CD in the next issues.