State of DevOps Report 2019

Pragmatic, prescriptive guidance

Published November 2019

d

The objective of this report is to provide pragmatic, prescriptive guidance for organisations struggling to achieve success with DevOps.

Key findings from previous State of DevOps Report's show that the most evolved organisations were able to integrate security into the software development cycle, with excellent results. These firms had achieved not only better integration of development, operations and security, but also automation of security measures.

For most companies though, integrating security into the software delivery lifecycle is an unrealised ideal, and an obstacle to furthering their DevOps evolution. Why is that the case? When security practices are so well understood, why is it so hard to integrate security into DevOps?