Skip to content
Stéphane Robert
Français
Account: not signed in, sync available My learning
Select theme
Français
Lire en français
Improve this page

What would you like to report?

The issue opens pre-filled with this page title and URL.

Course · Intermediate to advanced

DevSecOps Training

Build security into every step of delivery, from design to runtime

  • 4 levels
  • 17 modules
  • 111 lessons
  • 25 labs
  • 108 quizzes
  • 70h

Start Lesson: DevSecOps training: security across the whole delivery

Recommended before you start: Linux, Git (in French), Docker (in French), GitHub Actions or GitLab CI/CD (in French), Terraform (in French)

About this path · first level: 31 lessons, about 6 weeks

Welcome to your DevSecOps course. This page lists the whole course, in sixteen modules that follow the delivery cycle, from the culture to the runtime. Pick the Essential track for the backbone without Kubernetes, or Complete for the deep dives. Your progress is the same on both. All the lessons of the course are translated and listed here.

Yes, it is a long path. Nobody follows it in one go: it is split into levels. The first one, "Understand the flow and the risks", is 31 lessons of about 40 minutes: at one per working day, roughly 6 weeks, and it ends with its own result. Each module gives you a skill you can use the next day, and your progress waits for you in this browser and on the devices linked to your optional account.

Reach a goal

This topic path gathers all our content on the domain. Your personal path may only use part of it.

Progress 0 / 111 (0%)
  • Knowledge Not measured Your first quiz will show up at the end of a lesson.
  • Practice Not measured Labs measure what you can do. You do not need DSOXLab to start a course.
  • Proof Not measured Challenges and hands-on exams check that you can act without step-by-step instructions.

Tick lessons here, or with “Mark as read” at the end of each lesson. Progress stays in this browser; nothing is sent to the server unless you link this browser to an optional account.

Profile

  1. 01 Overview 0 / 1
D1

Understand the flow and the risks

0 / 31 lessons 0 / 4 modules

You read a delivery system as a flow, see where security fits in and model the threats to an application.

  1. 02 Culture and flow 0 / 8
  2. 03 The delivery system 0 / 11
  3. 04 DevSecOps fundamentals 0 / 6
  4. 05 Threat modeling 0 / 6

Level validation: no validation test is defined for this level yet.

D2

Secure the delivery chain

0 / 49 lessons 0 / 5 modules

You secure code, dependencies, secrets, CI/CD, the build and the supply chain, down to artefact provenance.

  1. 06 Securing code and dependencies 0 / 11
  2. 07 Secrets and machine identity 0 / 5
  3. 08 Securing CI/CD 0 / 16
  4. 09 Build, containers and IaC 0 / 8
  5. 10 Software supply chain 0 / 9

Level validation: no validation test is defined for this level yet.

D3

Protect production

0 / 19 lessons 0 / 4 modules

You control what gets deployed, protect the runtime, manage vulnerabilities and exceptions, and observe and respond to incidents.

  1. 11 Controlled deployment 0 / 3
  2. 12 Runtime security 0 / 4
  3. 13 Vulnerabilities, exceptions and compliance 0 / 4
  4. 14 Observe and respond 0 / 8

Level validation: no validation test is defined for this level yet.

D4

Measure and scale

0 / 11 lessons 0 / 3 modules

You measure the practice, steer it and extend it across the organisation, up to the capstone that brings the whole path together.

  1. 15 Measure and steer 0 / 5
  2. 16 Scale across teams 0 / 5
  3. 17 Capstone 0 / 1

Level validation: no validation test is defined for this level yet.

Is this project useful to you?

The guides, courses, quizzes and labs stay free. If you use them regularly, you can contribute to their upkeep and development.

Become a supporting member (new tab) One-time support (new tab) Learn more

Follow the project on LinkedIn