DevSecOps and Securing CI/CD Pipelines

  1. DevSecOps Tools and Technologies
    1. Security Testing Tools
      1. Static Analysis Tools
        1. Commercial SAST Solutions
          1. Open Source SAST Tools
            1. IDE Integration
              1. Custom Rule Development
              2. Dynamic Analysis Tools
                1. Web Application Scanners
                  1. API Security Testing Tools
                    1. Mobile Application Security Testing
                    2. Interactive Analysis Tools
                      1. IAST Solution Comparison
                        1. Agent-Based Testing
                          1. Runtime Security Testing
                        2. CI/CD Security Integration Tools
                          1. Pipeline Security Orchestration
                            1. Security Tool Integration Platforms
                              1. Workflow Automation
                                1. Result Aggregation and Reporting
                                2. Policy and Compliance Tools
                                  1. Policy as Code Frameworks
                                    1. Compliance Automation Tools
                                      1. Audit Trail Management
                                    2. Container and Kubernetes Security Tools
                                      1. Container Scanning Solutions
                                        1. Kubernetes Security Platforms
                                          1. Runtime Protection Tools
                                            1. Network Security Tools
                                            2. Cloud Security Tools
                                              1. Cloud Security Posture Management
                                                1. Cloud Workload Protection
                                                  1. Cloud Access Security Brokers
                                                    1. Multi-Cloud Security Management

                                                  Previous

                                                  7. Security in Operations and Post-Deployment

                                                  Go to top

                                                  Next

                                                  9. Culture, Governance, and Organizational Change