DevOps World | Jenkins World 2018

 Moving from DevOps to DevSecOps is incorporating Application Security Testing into developers’ CI/CD already existing pipelines. Application Security Testing such as Static Analysis (SAST), Software Composition Analysis (SCA) and Interactive Application Analysis (IAST) allows development teams to be informed about security vulnerabilities that are being introduced to their codebase so that those vulnerabilities can be addressed immediately. The most prevalent challenge is understanding how to best tune Application Security Testing tools to meet your specific security posture goals that will allow the Application Security team to reduce risk via tighter integration with dev team efforts.