.svg)
DevSecOps
The integration of security practices into every phase of the software development lifecycle, ensuring code is secure, compliant, and production-ready by default.
DevSecOps is the practice of integrating security testing and controls at every phase of the software development process — from initial design through integration, testing, deployment, and software delivery. Rather than treating security as a final checkpoint, DevSecOps embeds security practices into the CI/CD pipeline, automated testing frameworks, and code review processes. This approach reduces vulnerabilities in production, accelerates remediation timelines, and fosters a culture where security is a shared responsibility across development, operations, and security teams. CyberUp24's Engineering Services help organizations implement DevSecOps pipelines that are both fast and secure.
Related terms
Web Application Firewall (WAF)
A security solution that monitors, filters, and blocks HTTP traffic to and from web applications, protecting against application-layer attacks.
Read full description
%201.svg)
W
w
Vulnerability Management
The continuous practice of identifying, classifying, prioritizing, remediating, and mitigating vulnerabilities across an organization's technology environment.
Read full description
V
v
Threat Intelligence
Actionable information about cyber threats, threat actors, and their tactics, techniques, and procedures, used to inform and improve defensive security decisions.
Read full description
T
t
Supply Chain Security
The practice of identifying and mitigating cybersecurity risks introduced through an organization's vendors, suppliers, software dependencies, and third-party services.
Read full description
S
s
Security Operations Center (SOC)
A centralized team and facility that continuously monitors, detects, analyzes, and responds to cybersecurity incidents across an organization's environment.
Read full description
S
s
Security Awareness Training
Educational programs designed to help employees recognize, avoid, and report cybersecurity threats including phishing, social engineering, and policy violations.
Read full description
S
s
Ransomware
Malicious software that encrypts a victim's data or locks systems and demands payment for restoration, representing one of the most damaging cyber threats today.
Read full description
R
r
Privileged Access Management (PAM)
Security solutions that manage, monitor, and control elevated access rights for users, accounts, and systems across an IT environment.
Read full description
P
p
Phishing
A social engineering attack that uses deceptive emails, messages, or websites to trick users into revealing credentials, downloading malware, or transferring funds.
Read full description
P
p
Patch Management
The systematic process of identifying, acquiring, testing, and applying software updates to fix vulnerabilities and improve system security and stability.
Read full description
P
p
OSINT (Open Source Intelligence)
The collection and analysis of information from publicly available sources to support threat intelligence, investigations, and security assessments.
Read full description
O
o
Network Segmentation
The practice of dividing a computer network into smaller subnetworks to improve security and limit the spread of breaches within an organization's environment.
Read full description
N
n
Multi-Factor Authentication (MFA)
A security mechanism requiring users to verify their identity using two or more independent factors before gaining access to a system or application.
Read full description
M
m
Lateral Movement
The techniques attackers use to progressively move through a network after initial compromise, seeking higher-value targets and expanding their access.
Read full description
L
l
Malware
Malicious software designed to disrupt, damage, or gain unauthorized access to computer systems, including viruses, ransomware, trojans, and spyware.
Read full description
M
m
FISMA (Federal Information Security Management Act)
U.S. federal legislation that defines a comprehensive framework for protecting government information, operations, and assets against natural and man-made threats.
Read full description
F
f
Firewall
A network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
Read full description
F
f
Identity and Access Management (IAM)
The framework of policies and technologies that ensures the right individuals access the right resources at the right times and for the right reasons.
Read full description
I
i
Honeypot
A decoy system or network designed to attract and detect unauthorized access attempts, providing intelligence on attacker techniques and behavior.
Read full description
H
h
Exploit
A piece of software or technique that takes advantage of a vulnerability in a system to cause unintended behavior or gain unauthorized access.
Read full description
E
e
Cyber Kill Chain
A framework developed by Lockheed Martin that describes the stages of a cyberattack from reconnaissance through actions on objectives, used to identify and disrupt attacks.
Read full description
C
c
