Free book
DevSecOps for Modern Teams
Reading access
Free book
A practical book about integrating security into everyday delivery. It covers threat modeling, secure CI/CD, secrets management, dependency scanning, SAST, DAST, IaC policy checks, SBOMs, container security, and incident response. Read each chapter with a small project in mind. The examples are intentionally practical: adapt them, test the failure cases, and keep notes about trade-offs.
Level: intermediateLanguage: EN EnglishRating: 0Reviews: 0
Book
Book contents
01Chapter 1: What DevSecOps Changes02Chapter 2: Threat Modeling in Delivery Workflows03Chapter 3: Security Requirements and Abuse Cases04Chapter 4: Risk-Based Security Prioritization05Chapter 5: Secure CI CD Pipeline Design06Chapter 6: Secrets Management and Rotation07Chapter 7: Dependency Scanning and License Risk08Chapter 8: Static Analysis and Code Quality Gates09Chapter 9: Infrastructure as Code Policy Checks10Chapter 10: Container Image Security11Chapter 11: Dynamic Testing and API Security Tests12Chapter 12: Runtime Monitoring and Vulnerability Response13Chapter 13: SBOMs Provenance and Supply Chain Security14Chapter 14: Security Dashboards and Metrics15Chapter 15: Incident Response for Delivery Teams16Chapter 16: Capstone Secure Delivery Platform17Appendix A: Architecture Checklist18Appendix B: Operational Playbook19Appendix C: Common Mistakes and Fixes20Appendix D: Capstone Project Guide
Reviews
No approved reviews are visible yet.
Featured Books
Discussion
0 commentsNo approved comments are visible yet. New community replies may wait for moderation.