DevSecOps seems to be the flavour of the month when it comes to software security. Is this just a buzzword, an ideology that's only applicable in unicorn start-ups, or are there tools and practices that we should be using to write more secure code. In his talk, Jakob explores DevSecOps as an approach to avoiding the common issues he sees as a penetration tester, and presents a process to build out a DevSecOps pipeline.