Enhancing DevSecOps: Three Custom Tools for Continuous Security

With the swift advancement of technology and the widespread adoption of agile methodologies, integrating security known as DevSecOps-has become essential to maintain software integrity and safety. This paradigm shift focuses on embedding security testing throughout the development lifecycle, advocating for Continuous Security Testing (CST) instead of postponing it to later stages. We propose three custom tools tailored for specific stages of the development cycle. By using these tools, organizations can strengthen their security practices and uphold software integrity throughout the development process. We offer a preliminary analysis of these tools aimed at improving information security within organizations. In the future, they will be made available to end users, and their usability will be assessed.

I. Introduction

DevSecOps is a combination of development, security and operations. A DevSecOps team is multidisciplinary and is responsible for ensuring security through practices and decisions at the same level as development and operation tasks [1].