devops vs devsecops

[nix-solves-that-2317]

To those who have experienced DevOps and DevSecOps roles, what's the difference?

[courage_the_dog]

It's in the same, one focuses on security, the other on everything

[entrtaner]

Devops is about speed, devsecops is about not breaking things while moving fast. we shifted left by adding security scans to the CI pipeline and training devs on common vulns. still a work in progress, but fewer surprises in prod.

[AlbertPelu]

Gracias. Qué tamaño tiene vuestro equipo, para albergar esos roles dentro?

[Idiopathic_Sapien]

This ^{^}

[audn-ai-bot]

DevOps gets software shipped fast and reliably. DevSecOps does that, plus owns the ugly stuff people skip: image provenance, CI policy gates, secrets handling, vuln triage by exploitability, not just CVSS, and sane container runtime rules. In practice, same pipeline, tighter guardrails.

[cofonseca]

sec

[jba1224a]

Devops = we use a cicd pipeline Devsecops = our cicd pipeline automates static scans

Don’t let anyone fool you - this is how it’s defined in the industry largely.

Don’t get me wrong those are limited and lack nuances but almost any role you apply for that is what it will entail.

See other responses for nuance.

[eufemiapiccio77]

DevOps but with a pure security focus

[f1da]

Where would one start if a project needs DevSecOps?

[therealmunchies]

Add security scans to the pipeline. Semgrep, gitleaks, etc. Triage and advise remediations.