Powered by OpenAIRE graph
Found an issue? Give us feedback
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/ ZENODOarrow_drop_down
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
ZENODO
Article
Data sources: ZENODO
addClaim

Shift-Left Security Practices in Kubernetes-Based DevOps Environments: Measuring Impact on Software Vulnerability Reduction

Authors: Pruthvi Raj Seknametla;

Shift-Left Security Practices in Kubernetes-Based DevOps Environments: Measuring Impact on Software Vulnerability Reduction

Abstract

Container orchestration with Kubernetes has fundamentally changed how organizations deploy and manage software at scale. But orchestration complexity, when left unexamined from a security standpoint, creates an attack surface that grows proportionally with team velocity. This paper investigates how shifting security responsibilities to the earliest practical phases of the software development lifecycle -- commonly called shift-left security -- affects measurable vulnerability outcomes in organizations operating Kubernetes-based DevOps pipelines. Drawing on a structured study of nine mid-to-large technology organizations over a fourteen-month period (September 2022 to October 2023), we tracked vulnerability detection timing, remediation cost differentials, deployment failure rates, and mean time to remediation (MTTR) across teams that implemented shift-left practices against those following more traditional reactive models. Results indicate that teams with mature shift-left integration discovered 68% of critical and high-severity vulnerabilities before code reached staging environments, compared to 21% in control groups. Remediation costs dropped significantly when defects were caught earlier in the pipeline, and deployment rollback incidents decreased by an average of 44% across adopting teams. We also examine the tooling landscape -- static analysis, container image scanning, policy-as-code, and admission control -- and explain how each layer contributes to a measurable reduction in production-facing risk. The conclusions offer practical guidance for engineering leaders and security architects deciding where to focus investment.

Powered by OpenAIRE graph
Found an issue? Give us feedback