Securely Set DevOps Free with NGINX Modern Application Security By now, the concept of “DevSecOps” is familiar to just about everyone working in modern software development, with its promise to fundamentally strengthen application security as well as alleviate friction between DevOps and security teams. Under a DevSecOps model, security is shifted left and baked directly into the DevOps development and deployment process. In particular, security is embedded at every phase of the continuous integration/continuous deployment (CI/CD) pipeline to help identify security flaws earlier. Unlike traditional security models, DevSecOps places security at the heart of development, helping to identify issues closer to their point of origin, to reduce costly (and time-consuming) revisions and prevent vulnerabilities from reaching production. But despite the push towards DevSecOps, security teams still appear to be lagging behind the pace of DevOps. According to snyk’s DevSecOps Insights 2020 [ more… ]