DevSecOps: Securing Infrastructure in the Age of Automation

Cloud Native Infrastructure, Infrastructure as Code (IaC), containers, and CI/CD pipelines were used by

organizations for better scalability and deployment times. This article explores how DevSecOps can enable security in

automated infrastructure environments, and the ways that it integrates security in a continuous manner. DevSecOps

adoption was evaluated and its effects on the performance of security using a quantitative research approach. The

results indicated that 82% are conducting IaC security scanning, 76% have security part of their CI/CD pipelines and

71% are doing container vulnerability scanning. The research also revealed that vulnerability detection was up to 73%

faster, configuration error incident avoidance was up to 67% and deployment reliability increased by up to 72% post

adoption of the DevSecOps initiative. The results have revealed that DevSecOps as a key set of principles is to ensure

that infrastructure configuration is secure and scalable.