Draft:Practical DevSecOps
![]() | Draft article not currently submitted for review.
This is a draft Articles for creation (AfC) submission. It is not currently pending review. While there are no deadlines, abandoned drafts may be deleted after six months. To edit the draft click on the "Edit" tab at the top of the window. To be accepted, a draft should:
It is strongly discouraged to write about yourself, your business or employer. If you do so, you must declare it. Where to get help
How to improve a draft
You can also browse Wikipedia:Featured articles and Wikipedia:Good articles to find examples of Wikipedia's best writing on topics similar to your proposed article. Improving your odds of a speedy review To improve your odds of a faster review, tag your draft with relevant WikiProject tags using the button below. This will let reviewers know a new draft has been submitted in their area of interest. For instance, if you wrote about a female astronomer, you would want to add the Biography, Astronomy, and Women scientists tags. Editor resources
Last edited by Qwerfjkl (bot) (talk | contribs) 9 days ago. (Update) |
Founded | 2018 |
---|---|
Founder | Mohammed A. Imran |
Type | Private |
Headquarters | San Francisco, California, U.S. |
Area served | Worldwide |
Website | practical-devsecops.com |
Practical DevSecOps is an online cybersecurity training platform offering hands-on courses and certifications in DevSecOps, AI Security, and Application Security. Based in San Francisco, it provides browser-based labs and practical exams focused on secure software development, threat modeling, container security, cloud-native security, and secure MLOps.
Overview
Established in 2018, Practical DevSecOps provides browser-based labs and certification exams covering secure CI/CD, software supply chain security, cloud-native hardening, and DevSecOps toolchains. Its certification exams typically span 6 to 24 hours and focus on real-world scenarios.
The company has been featured in over a dozen educational sessions hosted by the Cloud Native Computing Foundation (CNCF), demonstrating its frameworks and methodologies for AI Security, threat modeling, and secure MLOps.[1][2][3][4][5][6][7][8][9][10][11][12][13]
Courses and Certifications
Practical DevSecOps offers several certifications, including:
- Certified DevSecOps Professional (CDP)
- Certified DevSecOps Expert (CDX)
- Certified Cloud-Native Security Expert (CCNSE)
- Certified AI Security Professional (CAISP)
The platform is listed on the U.S. Department of Homeland Security’s NICCS Catalog as a DevSecOps course provider.[14]
Reception
Practical DevSecOps was included in a 2024 TechTarget article highlighting top DevSecOps training providers, alongside organizations such as Linux Foundation and SANS Institute.[15]
Its educational sessions on DevSecOps tooling, cloud-native security, and AI security have been hosted on the CNCF’s official YouTube channel, providing independent validation of its technical depth and community relevance.
Industry Relevance
Practical DevSecOps’s curriculum aligns with current trends in the cybersecurity industry, including “shift-left” security practices, supply chain risk mitigation, and AI governance. These are supported by academic literature.[16][17]
See also
- DevSecOps
- Secure software development lifecycle
- Cloud-native security
- Threat modeling
- Infrastructure as Code
- AI Security
References
- ^ CNCF, "DevSecOps at Scale," YouTube, August 2023. https://www.youtube.com/watch?v=7UkPeTZpqGY
- ^ CNCF, "DevSecOps Toolchain: An End-to-End Lab Demo," YouTube, April 2023. https://www.youtube.com/watch?v=ItATPPuKsiY
- ^ CNCF, "A Practical Guide to Threat Modeling for DevSecOps Engineers," YouTube, November 2023. https://www.youtube.com/watch?v=bMo1OtKo0d8
- ^ CNCF, "How to Integrate Threat Modeling into CI/CD Pipelines," YouTube, January 2024. https://www.youtube.com/watch?v=0pGPXLErwFs
- ^ CNCF, "Automated DevSecOps for Modern Cloud-Native Applications," YouTube, May 2024. https://www.youtube.com/watch?v=E56ksWM_jCc
- ^ CNCF, "Security-as-Code for Modern DevOps Teams," YouTube, July 2024. https://www.youtube.com/watch?v=cZPnFwANlCY
- ^ CNCF, "AI Threat Modeling for Security Engineers," YouTube, May 2024. https://www.youtube.com/watch?v=j184Av-LJvI
- ^ CNCF, "DevSecOps Engineer's Toolbox," YouTube, April 2024. https://www.youtube.com/watch?v=h37zp5g5tO4
- ^ CNCF, "Secure Software Supply Chain in DevSecOps Pipelines," YouTube, July 2024. https://www.youtube.com/watch?v=wG1M7DYHECg
- ^ CNCF, "DevSecOps for AI: Building Secure MLOps Pipelines," YouTube, August 2024. https://www.youtube.com/watch?v=u-GbqE87tdw
- ^ CNCF, "DevSecOps Test Strategy for Cloud-Native Apps," YouTube, September 2024. https://www.youtube.com/watch?v=7JpHf_Q1wWE
- ^ CNCF, "Kubernetes Security Essentials for DevSecOps Engineers," YouTube, September 2024. https://www.youtube.com/watch?v=fXdaPDW3Jq8
- ^ CNCF, "DevSecOps for Developers: Secure Coding & Shift-Left Best Practices," YouTube, October 2024. https://www.youtube.com/watch?v=Wtla6XinV_M
- ^ https://niccs.cisa.gov/training/search/practical-devsecops/digital-defense-certification
- ^ https://www.techtarget.com/searchsecurity/tip/Top-DevSecOps-certifications-and-trainings
- ^ Roshan N. Rajapakse et al., “Challenges and Solutions When Adopting DevSecOps: A Systematic Review,” arXiv, 2021.
- ^ Michael Fu et al., “AI for DevSecOps: A Landscape and Future Opportunities,” arXiv, 2024.
Cite error: A list-defined reference with the name "cncf1" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf2" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf3" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf4" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf5" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf6" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf7" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf8" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf9" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf10" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf11" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf12" has been invoked, but is not defined in the <references>
tag (see the help page).
Cite error: A list-defined reference with the name "cncf13" has been invoked, but is not defined in the <references>
tag (see the help page).