DevSecOps

Integration of security practices into every phase of the software development lifecycle, rather than treating security as a final gate before release. In practice, this means automated security scanning in CI/CD pipelines, dependency vulnerability checking, infrastructure-as-code security policies, and security requirements in sprint planning.