Security checks that run alongside development and operations from the first line of code, so whoever ships the software shares responsibility for its security.
DevSecOps runs automated security checks inside the CI/CD pipeline itself, so code is tested for weaknesses at each step on its way to production. For AI deployments, that means continuously scanning container images for vulnerabilities, auditing model weights for supply chain attacks, and verifying that control boundaries hold before any new agentic workflow reaches production.
See also CI/CD, Control Boundaries, Air-Gapped Environment, Role-Based Access Control and Zero Trust Architecture.