A short release cycle has myriad benefits: faster delivery to market for new functionalities, and swiftly-improving accuracy toward goals (what we call Agile) chief among them. And from a security perspective, a quick reaction time to zero-day threats thanks to a well-oiled assembly line is invaluable. But, of course, there are drawbacks: like a lack of cohesion and communication between security and dev teams, and unequal pressure on AppSec to quicken their side of SLAs. As Luis points out, we discovered in our State of AppSecOps Report that the ship cycle sweet spot is 1-2 weeks (most often 2), wherein security can be effectively balanced with engineering initiatives.
About ArmorCode
We develop, sell, and deliver the world’s first and leading AppSecOps platform to our customers, along with the expertise, support and community they need to ship secure software and ship it fast. The ArmorCode platform brings together powerful AppSec Posture, Vulnerability, and Compliance Management with DevSecOps workflow automation._____________________________________________________
Follow us
www.armorcode.comLinkedIn: https://www.linkedin.com/armorcodeTwitter: https://twitter.com/code_armor_____________________________________________________
About AppSecOps
What is AppSecOps? https://www.armorcode.com/what-is-appsecops
The State of AppSecOps Report: https://www.armorcode.com/state-of-appsecops-2022
AppSecOps Research from Enterprise Strategy Group: https://www.armorcode.com/esg-appsecops-showcase
