Secure SDLC
Building security checks into every stage of the software development lifecycle, not bolting them on at the end.
Learn it through a story
- Shift Left, or Get Left Behind (Cybersecurity for Juniors 3, Ch 2)
Related terms
- Secret scanning Automated tools that watch public code for exposed credentials.
- Secret sprawl Credentials scattered across many places, repos, notes, chats, with no central record of where they all live.
- Secrets manager / vault A system that stores credentials centrally and issues them securely, often with short lifespans.
- Security champion A team member, not on the security team, trained to run lightweight security checks on their own team's work.
- Security mindset Applying these questions as a habit of thought across any role, not only security-titled jobs.
- Shadow AI People using AI tools at work that their organisation hasn't approved.