DevSecOps Productivity Metrics and Tools
summary
Focuses on measurable claims and concrete tooling: ties Lead Time, Deployment Frequency, MTTR, Change Fail Rate to business KPIs and shows how reducing lead time shortens product feedback loops. Demonstrates microservices observability with Istio, Jaeger, Zipkin, Grafana, Elastic, uses dependency scanners (WhiteSource/Black Duck), gitrob for secrets, OSS‑Fuzz (28k bugs in 850 projects) and fuzzing, mutation tests to validate test suites, and Canary/feature‑toggle deployments plus mutual TLS for safer rollouts.
AI-written summary · about
chapters (11)
- 0:00Introduction to devsecops
- 2:57Continuous integration design
- 8:35Threat modeling and frameworks
- 14:14Vulnerability management
- 18:56Advanced security testing
- 24:23Mutation testing and cryptography
- 30:12Deployment and infrastructure
- 35:34Managing test data
- 40:09Traffic shaping and chatops
- 45:41KPIs and business value
- 52:19Scaling and final conclusion
related talks
01h 00mTop 10 Metrics for Successful DevSecOps Projects
47mMeasuring DevSecOps
33mMeasuring Developer Efficiency in DevOps: Key Questions, Metrics, Best Practices
51mMeasuring DevSecOps: building metrics to understand effectiveness and success
37m#DataDrivenDevops
46mMeasuring DevSecOps: Building Metrics to Understand Effectiveness and Success
37mDevOps, 12 Factor and Platform Engineering
15mDelivering DevOps Business Metrics that Matter