Foray

DevSecOps roadmap

Building security into how software is written, built, deployed and run, from threat modelling to detection and response.

13 topics · 67 nodes · 52 covered · 8 partly · 7 planned · updated 2026-10-17

Sign in with your Mycelium account to see which nodes you have finished.

Guided path: DevSecOpsBuilding security into how software is written, built, deployed and run, from threat modelling to detection and response.25 stages
  1. 1.Linux for DevOps: The Command Line, Services and TroubleshootingBeginner
  2. 2.Networking for DevOps: From Packets to ProductionBeginner
  3. 3.GG - Good GitBeginner
  4. 4.SSH: Secure ShellBeginner
  5. 5.Docker: Containers from First Run to ProductionBeginner
  6. 6.CI/CD with GitHub Actions: From Commit to ProductionBeginner
  7. 7.DevSecOps: Building Security into DeliveryBeginner
  8. 8.Linux for DevOps: The Command Line, Services and TroubleshootingIntermediate
  9. 9.Networking for DevOps: From Packets to ProductionIntermediate
  10. 10.Docker: Containers from First Run to ProductionIntermediate
  11. 11.CI/CD with GitHub Actions: From Commit to ProductionIntermediate
  12. 12.DevSecOps: Building Security into DeliveryIntermediate
  13. 13.Terraform and OpenTofu: Infrastructure as CodeBeginner
  14. 14.Kubernetes: Run and Operate Containerized ApplicationsBeginner
  15. 15.AWS for DevOps: Accounts, Compute, Networking and OperationsBeginner
  16. 16.Docker: Containers from First Run to ProductionAdvanced
  17. 17.Linux for DevOps: The Command Line, Services and TroubleshootingAdvanced
  18. 18.SSH: Secure ShellAdvanced
  19. 19.CI/CD with GitHub Actions: From Commit to ProductionAdvanced
  20. 20.Terraform and OpenTofu: Infrastructure as CodeIntermediate
  21. 21.Kubernetes: Run and Operate Containerized ApplicationsIntermediate
  22. 22.AWS for DevOps: Accounts, Compute, Networking and OperationsIntermediate
  23. 23.DevSecOps: Building Security into DeliveryAdvanced
  24. 24.Kubernetes: Run and Operate Containerized ApplicationsAdvanced
  25. 25.AWS for DevOps: Accounts, Compute, Networking and OperationsAdvanced
Show
  • Covered
  • Partly covered
  • Planned

  1. 1. Core

    Mindset and threat modelling

    Security as a shared responsibility, found early.

    3 / 4 covered

  2. 2. Core

    Secure coding

    Avoiding the vulnerabilities behind most breaches.

    2 / 5 covered

  3. 3. Core

    Dependencies and software supply chain

    Trusting what you ship.

    4 / 5 covered

  4. 4. Core

    Securing the pipeline

    CI/CD is a high-value target.

    5 / 6 covered

  5. 5. Core

    Container security

    Small, non-root, scanned and sandboxed.

    3 / 4 covered

  6. 6. Core

    Infrastructure as code security

    Catching misconfiguration before it exists.

    4 / 4 covered

  7. 7. Core

    Kubernetes security

    Hardening the cluster in layers.

    7 / 7 covered

  8. 8. Core

    Cloud security

    Identity, data protection and account structure.

    5 / 7 covered

  9. 9. Core

    Identity and zero trust

    Verify every request, not the network.

    5 / 5 covered

  10. 10. Recommended

    Host and network hardening

    Reducing the attack surface of the machines underneath.

    6 / 6 covered

  11. 11. Core

    Vulnerability management

    Turning an endless stream of findings into prioritised work.

    2 / 4 covered

  12. 12. Core

    Detection and response

    Finding attacks in progress and recovering.

    4 / 6 covered

  13. 13. Recommended

    Governance and compliance

    Proving the controls work, continuously.

    2 / 4 covered