Fortinet FortiDevSec

Software applications are everywhere, and the success of every business depends on its ability to develop and deploy business software applications faster and faster.

Since time-to-market is crucially important, businesses simply cannot afford to follow the traditional slower waterfall method of application development anymore. The waterfall model is a sequential approach where changes to the application are deployed perhaps once in many months, and the development team moved to the next phase of development or testing only if the previous step completed successfully.

Application development teams are now adopting agile and DevOps methodologies for rapid application development and deployment. In the agile model, development and testing activities are concurrent and continuously iterated. The application changes are deployed very frequently to the cloud, and so the development, functional, and application security (AppSec) testing teams have tighter collaboration and communication with faster turnaround times. This condition has led to the need to automate the workflow involved in building and deploying applications to the cloud, and subsequently, to the rise of the DevOps role, wherein continuous integration/continuous deployment (CI/CD) tools are used to enable this automation.

Application Security (AppSec) testing needs to be automated as well and made to work in this CI/CD paradigm and be incorporated in the earlier stages of the development cycle (commonly referred to as shift-left). This scenario is where many AppSec testing products may fall short when they are not natively built to support the user experience of developers and DevOps, who typically do not have much AppSec expertise and are unable to use such products effectively. Quite simply, they are not DevSecOps enabled.

DevSecOps is short for development, security, and operations. It refers to automating the integration of security at every phase of the software development lifecycle, from initial design through integration, testing, deployment, and software delivery.

Key Points

Product Features