Devsecops Glossary

Browse 5 devsecops terms defined in plain English, from the cultural dictionary of computing.

5 Devsecops Terms

DAST
Dynamic Application Security Testing — testing a running application by sending crafted requests to discover vulnerabilities from the outside (black-box...
SAST
Static Application Security Testing — analyzing source code or compiled binaries for security vulnerabilities without executing the program. Finds issues like...
Secret Scanning
Automated detection of secrets (API keys, passwords, tokens, private keys) accidentally committed to source code repositories. Tools like GitHub Secret...
Shift Left
Moving activities (testing, security scanning, performance validation) earlier in the development lifecycle — from production leftward to development. Finding...
Supply Chain Security
Protecting the integrity of software by securing every component in the supply chain — source code, build systems, dependencies, CI/CD pipelines, and artifact...

Related Topics