{"id":24332,"date":"2026-11-03T12:03:20","date_gmt":"2026-11-03T04:03:20","guid":{"rendered":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html"},"modified":"2026-11-03T12:03:20","modified_gmt":"2026-11-03T04:03:20","slug":"what-is-cisco-doing-differently-in-devsecops","status":"publish","type":"post","link":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html","title":{"rendered":"What Is Cisco Doing Differently in the Space of DevSecOps?"},"content":{"rendered":"<p>For most modern engineering organizations, DevSecOps has historically fallen short of its promise. Instead of fostering frictionless collaboration between developers, security teams, and platform operators, standard tooling often creates a noisy chasm: static security scanners dump thousands of theoretical vulnerabilities into developer backlogs, while runtime security teams lack the source-code and build-pipeline context needed to understand real-world exploits. <\/p>\n<p>Cisco is actively reshaping this dynamic. Rather than treating DevSecOps as an assortment of disconnected pipeline plugins, Cisco has engineered an architectural bridge connecting the developer IDE, the build system, kernel-level workload execution, and enterprise security operations. Anchored by platforms like Panoptica, deep eBPF infrastructure via Isovalent, and data analytics through Splunk, Cisco&#8217;s approach transitions DevSecOps from reactive gatekeeping into continuous, contextual application assurance.<\/p>\n<hr \/>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_17 counter-hierarchy counter-decimal ez-toc-light-blue\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" style=\"display: none;\"><i class=\"ez-toc-glyphicon ez-toc-icon-toggle\"><\/i><\/a><\/span><\/div>\n<nav><ul class=\"ez-toc-list ez-toc-list-level-1\"><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Ciscos_DevSecOps_Strategy_Shift_Left_Meets_Shield_Right\" title=\"Cisco\u2019s DevSecOps Strategy: Shift Left Meets Shield Right\">Cisco\u2019s DevSecOps Strategy: Shift Left Meets Shield Right<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#The_Cisco_DevSecOps_Ecosystem_Connecting_Panoptica_Splunk_and_Outshift\" title=\"The Cisco DevSecOps Ecosystem: Connecting Panoptica, Splunk, and Outshift\">The Cisco DevSecOps Ecosystem: Connecting Panoptica, Splunk, and Outshift<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Outshift_by_Cisco\" title=\"Outshift by Cisco\">Outshift by Cisco<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Cisco_Panoptica\" title=\"Cisco Panoptica\">Cisco Panoptica<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Isovalent_Cilium_and_Tetragon\" title=\"Isovalent (Cilium and Tetragon)\">Isovalent (Cilium and Tetragon)<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Splunk_Enterprise_Security_and_Observability\" title=\"Splunk Enterprise Security and Observability\">Splunk Enterprise Security and Observability<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Comparative_Analysis_Cisco_DevSecOps_vs_Palo_Alto_Networks_and_Wiz\" title=\"Comparative Analysis: Cisco DevSecOps vs. Palo Alto Networks and Wiz\">Comparative Analysis: Cisco DevSecOps vs. Palo Alto Networks and Wiz<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Step-by-Step_Implementation_Integrating_Cisco_DevSecOps_into_CICD_Pipelines\" title=\"Step-by-Step Implementation: Integrating Cisco DevSecOps into CI\/CD Pipelines\">Step-by-Step Implementation: Integrating Cisco DevSecOps into CI\/CD Pipelines<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Step_1_Pre-Commit_and_Pull_Request_IaC_Verification\" title=\"Step 1: Pre-Commit and Pull Request IaC Verification\">Step 1: Pre-Commit and Pull Request IaC Verification<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Step_2_Container_Image_and_SBOM_Scanning_in_the_Build_Stage\" title=\"Step 2: Container Image and SBOM Scanning in the Build Stage\">Step 2: Container Image and SBOM Scanning in the Build Stage<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Step_3_CICD_Pipeline_Attestation_and_Policy_Enforcement\" title=\"Step 3: CI\/CD Pipeline Attestation and Policy Enforcement\">Step 3: CI\/CD Pipeline Attestation and Policy Enforcement<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Step_4_Kubernetes_Admission_Control_and_Deployment_Hardening\" title=\"Step 4: Kubernetes Admission Control and Deployment Hardening\">Step 4: Kubernetes Admission Control and Deployment Hardening<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Step_5_Automated_Remediation_and_Telemetry_Feedback\" title=\"Step 5: Automated Remediation and Telemetry Feedback\">Step 5: Automated Remediation and Telemetry Feedback<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Enterprise_Licensing_Packaging_and_Pricing_Models\" title=\"Enterprise Licensing, Packaging, and Pricing Models\">Enterprise Licensing, Packaging, and Pricing Models<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#How_is_Cisco_Panoptica_priced_and_licensed\" title=\"How is Cisco Panoptica priced and licensed?\">How is Cisco Panoptica priced and licensed?<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Can_teams_evaluate_the_platform_without_an_enterprise_contract\" title=\"Can teams evaluate the platform without an enterprise contract?\">Can teams evaluate the platform without an enterprise contract?<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#How_does_Panoptica_fit_into_a_Cisco_Enterprise_Agreement_EA\" title=\"How does Panoptica fit into a Cisco Enterprise Agreement (EA)?\">How does Panoptica fit into a Cisco Enterprise Agreement (EA)?<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#How_does_the_Splunk_acquisition_affect_DevSecOps_tooling_costs\" title=\"How does the Splunk acquisition affect DevSecOps tooling costs?\">How does the Splunk acquisition affect DevSecOps tooling costs?<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Are_open-source_tools_like_Isovalent_Cilium_free_to_use_alongside_Cisco\" title=\"Are open-source tools like Isovalent Cilium free to use alongside Cisco?\">Are open-source tools like Isovalent Cilium free to use alongside Cisco?<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Technical_Specifications_Blueprints_and_Official_Reference_Portals\" title=\"Technical Specifications, Blueprints, and Official Reference Portals\">Technical Specifications, Blueprints, and Official Reference Portals<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Architecture_and_Component_Specifications\" title=\"Architecture and Component Specifications\">Architecture and Component Specifications<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\/#Primary_Developer_and_Administrative_Portals\" title=\"Primary Developer and Administrative Portals\">Primary Developer and Administrative Portals<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Ciscos_DevSecOps_Strategy_Shift_Left_Meets_Shield_Right\"><\/span>Cisco\u2019s DevSecOps Strategy: Shift Left Meets Shield Right<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Cisco\u2019s overarching DevSecOps philosophy rejects the premise that finding vulnerabilities earlier in the software development lifecycle (SDLC)\u2014the traditional &#8220;shift-left&#8221; doctrine\u2014is sufficient on its own. Shifting left without operational intelligence produces alert fatigue, as developers spend hundreds of hours triaging vulnerabilities that may never be loaded into memory or exposed to a network attack vector. Cisco\u2019s strategy pairs shift-left static analysis with dynamic &#8220;shield-right&#8221; runtime context.<\/p>\n<p>Understanding this strategy requires walking through how Cisco moves security context back and forth across development and production environments:<\/p>\n<ol>\n<li><strong>Context-Aware Software Composition (Code to Build):<\/strong> Instead of merely flagging Common Vulnerabilities and Exposures (CVEs) found within dependencies, Cisco inspects the application&#8217;s build graph, creates a cryptographically signed Software Bill of Materials (SBOM), and analyzes whether vulnerable code paths are actively invoked.<\/li>\n<li><strong>Declarative Policy as Code (Build to Deploy):<\/strong> Using unified policy definitions based on open standards (such as Open Policy Agent and Kubernetes Admission Controls), security policies are expressed declaratively. Developers can test deployments locally against the exact same guardrails enforced during production cluster onboarding.<\/li>\n<li><strong>Kernel-Native Workload Shielding (Runtime):<\/strong> By leveraging extended Berkeley Packet Filter (eBPF) technology, the platform observes system calls, process executions, and network socket operations directly at the Linux kernel layer. This eliminates the heavy performance penalties of legacy container security sidecars while detecting zero-day anomalies in real time.<\/li>\n<li><strong>Bidirectional Closed-Loop Feedback (Runtime to Code):<\/strong> When anomalous behavior or active exploits are detected in production, runtime telemetry is mapped directly back to the specific build commit, container image hash, and responsible repository. Developers receive precise, actionable tickets complete with remediation guidance rather than vague alerts.<\/li>\n<\/ol>\n<p>This continuous feedback loop ensures that security controls assist software delivery velocity instead of stalling release pipelines.<\/p>\n<hr \/>\n<h2><span class=\"ez-toc-section\" id=\"The_Cisco_DevSecOps_Ecosystem_Connecting_Panoptica_Splunk_and_Outshift\"><\/span>The Cisco DevSecOps Ecosystem: Connecting Panoptica, Splunk, and Outshift<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>To execute this vision, Cisco has unified native incubation initiatives with major strategic acquisitions. Rather than forcing a single monolithic tool onto disparate engineering teams, Cisco delivers an integrated ecosystem where each component handles a dedicated layer of the modern application stack.<\/p>\n<pre><code>+-------------------------------------------------------------------------+\n|                           DEVELOPER \/ CI\/CD                             |\n|  [Outshift OSS Tools] ---&gt; [Panoptica Code &amp; Supply Chain Analysis]     |\n+------------------------------------+------------------------------------+\n                                     | (SBOM, Hashes, Policies)\n                                     v\n+-------------------------------------------------------------------------+\n|                        RUN-TIME &amp; CLUSTER FABRIC                        |\n|  [Panoptica CNAPP]   &lt;---&gt;  [Isovalent \/ Cilium eBPF Security Engine]   |\n+------------------------------------+------------------------------------+\n                                     | (Telemetry, Audit Logs, Traces)\n                                     v\n+-------------------------------------------------------------------------+\n|                       ENTERPRISE SECURITY &amp; SOC                         |\n|  [Splunk Analytics]  &lt;---&gt;  [Cisco Security Cloud &amp; AI Remediation]     |\n+-------------------------------------------------------------------------+\n<\/code><\/pre>\n<h3><span class=\"ez-toc-section\" id=\"Outshift_by_Cisco\"><\/span>Outshift by Cisco<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Outshift functions as Cisco\u2019s emerging technology and incubation engine. It leads open-source projects (such as KubeClarity for multi-engine SBOM detection and OpenClarity for cloud-native visibility) and incubated Panoptica. Outshift ensures Cisco&#8217;s security products align with open-source container and Kubernetes standards, preventing enterprise tooling lock-in.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cisco_Panoptica\"><\/span>Cisco Panoptica<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Panoptica is Cisco\u2019s Cloud Native Application Protection Platform (CNAPP). It acts as the operational hub across the SDLC by combining several previously fragmented capabilities:<br \/>\n* <strong>Cloud Security Posture Management (CSPM):<\/strong> Continuously validates cloud configurations across AWS, Azure, and GCP.<br \/>\n* <strong>Cloud Workload Protection (CWPP):<\/strong> Protects containers, Kubernetes clusters, and serverless architectures.<br \/>\n* <strong>Cloud Infrastructure Entitlement Management (CIEM):<\/strong> Audits and enforces least-privilege identity access management (IAM) roles.<br \/>\n* <strong>API Security:<\/strong> Automatically discovers shadow APIs, checks OpenAPI contract adherence, and conducts dynamic fuzz testing against OWASP API Top 10 vulnerabilities.<br \/>\n* <strong>Attack Path Analysis:<\/strong> Uses security graph queries to model how an attacker could chain misconfigurations, leaked credentials, and unpatched workloads to compromise critical databases.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Isovalent_Cilium_and_Tetragon\"><\/span>Isovalent (Cilium and Tetragon)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Cisco\u2019s acquisition of Isovalent places eBPF technology at the foundation of its cloud-native security stack. Isovalent provides:<br \/>\n* <strong>Deep Kernel Observability (Tetragon):<\/strong> Real-time monitoring of process execution, namespace escapes, file integrity, and network connections without modifying application code.<br \/>\n* <strong>High-Performance Microsegmentation (Cilium):<\/strong> Identity-aware Layer 3 to Layer 7 network policy enforcement that protects microservices at line rate without IP-based bottlenecks.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Splunk_Enterprise_Security_and_Observability\"><\/span>Splunk Enterprise Security and Observability<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The integration of Splunk bridges the gap between DevOps and the Security Operations Center (SOC). Telemetry generated by Panoptica and Isovalent is ingested into Splunk, normalizing pipeline events, container metrics, and kernel signals into the Splunk Common Information Model (CIM). SOC analysts gain immediate context on whether an alert is a runtime attack or a known vulnerability already queued for a developer patch.<\/p>\n<hr \/>\n<h2><span class=\"ez-toc-section\" id=\"Comparative_Analysis_Cisco_DevSecOps_vs_Palo_Alto_Networks_and_Wiz\"><\/span>Comparative Analysis: Cisco DevSecOps vs. Palo Alto Networks and Wiz<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>To understand how Cisco fits into the enterprise landscape, it helps to compare its technical architecture directly with Palo Alto Networks (Prisma Cloud) and Wiz.<\/p>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">Dimension<\/th>\n<th style=\"text-align: left;\">Cisco DevSecOps (Panoptica + Isovalent + Splunk)<\/th>\n<th style=\"text-align: left;\">Palo Alto Networks (Prisma Cloud)<\/th>\n<th style=\"text-align: left;\">Wiz<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><strong>Primary Architecture<\/strong><\/td>\n<td style=\"text-align: left;\">Unified hybrid model: Agentless cloud scanning combined with eBPF kernel-level runtime telemetry.<\/td>\n<td style=\"text-align: left;\">Broad hybrid platform: Mixture of agentless scanning and traditional host\/container agents.<\/td>\n<td style=\"text-align: left;\">Purely agentless architecture utilizing out-of-band cloud API and snapshot scanning.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Shift-Left \/ CI\/CD Depth<\/strong><\/td>\n<td style=\"text-align: left;\">Embedded SBOM generation, IaC scanning, CI\/CD attestation, and developer PR feedback loops.<\/td>\n<td style=\"text-align: left;\">Broad static code analysis, vulnerability scanning, and IaC inspection via integrated modules.<\/td>\n<td style=\"text-align: left;\">Repository scanning, IaC verification, and container scanning integrated into popular CI tools.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Runtime Enforcement Engine<\/strong><\/td>\n<td style=\"text-align: left;\">Kernel-level eBPF instrumentation (Tetragon\/Cilium) offering zero-overhead monitoring and native blocking.<\/td>\n<td style=\"text-align: left;\">DaemonSet and host agents providing runtime defense, Web Application and API Protection (WAAP).<\/td>\n<td style=\"text-align: left;\">Cloud Detection and Response (CDR) primarily based on cloud audit logs and forensic disk snapshots.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>API Security Posture<\/strong><\/td>\n<td style=\"text-align: left;\">Deep API catalog discovery, dynamic fuzz testing, and OWASP API Top 10 drift detection.<\/td>\n<td style=\"text-align: left;\">WAAP module with API inventory and API protection policies.<\/td>\n<td style=\"text-align: left;\">API visibility primarily derived through cloud configuration analysis and posture checks.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>SOC &amp; Analytics Integration<\/strong><\/td>\n<td style=\"text-align: left;\">Native bidirectional integration with Splunk SIEM\/SOAR and Cisco Security Cloud.<\/td>\n<td style=\"text-align: left;\">Cortex XDR integration; requires third-party event routing for non-Palo Alto SOCs.<\/td>\n<td style=\"text-align: left;\">Webhook and SIEM export integrations into third-party SOC workflows.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Deployment Footprint<\/strong><\/td>\n<td style=\"text-align: left;\">Low footprint; lightweight eBPF kernel modules with no sidecar injection required.<\/td>\n<td style=\"text-align: left;\">Variable; can require heavier user-space agents on nodes for full CWPP capabilities.<\/td>\n<td style=\"text-align: left;\">Zero node footprint; read-only access to cloud accounts and APIs.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Ideal Operational Environment<\/strong><\/td>\n<td style=\"text-align: left;\">Enterprises requiring unified network, infrastructure, and application security tied into an enterprise SOC.<\/td>\n<td style=\"text-align: left;\">Organizations heavily invested in the Palo Alto Strata and Cortex enterprise ecosystem.<\/td>\n<td style=\"text-align: left;\">Cloud-first organizations prioritizing rapid onboarding and asset relationship visibility.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>While Wiz excels in agentless risk graphing and Prisma Cloud offers legacy depth, Cisco provides deep runtime observability through eBPF alongside enterprise-grade SOC ingestion through Splunk.<\/p>\n<hr \/>\n<h2><span class=\"ez-toc-section\" id=\"Step-by-Step_Implementation_Integrating_Cisco_DevSecOps_into_CICD_Pipelines\"><\/span>Step-by-Step Implementation: Integrating Cisco DevSecOps into CI\/CD Pipelines<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Operationalizing Cisco\u2019s DevSecOps capabilities requires embedding automated policies directly into continuous integration workflows. The following sequential guide outlines how platform and security engineers configure Panoptica within an enterprise pipeline.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Step_1_Pre-Commit_and_Pull_Request_IaC_Verification\"><\/span>Step 1: Pre-Commit and Pull Request IaC Verification<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Prevent misconfigured infrastructure from reaching the main branch by running declarative scans on Terraform, Helm, or CloudFormation templates.<br \/>\n* Configure Panoptica CLI tools to evaluate pull requests against established CIS Benchmarks.<br \/>\n* Enforce automated linting to block excessive security group permissions, unencrypted volumes, or overly permissive Kubernetes role bindings before merging.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Step_2_Container_Image_and_SBOM_Scanning_in_the_Build_Stage\"><\/span>Step 2: Container Image and SBOM Scanning in the Build Stage<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Once code compiles, container images must be analyzed before push operations to a registry occur.<br \/>\n* Execute container scanning using Panoptica\u2019s integrated scan engine within the CI runner (e.g., GitHub Actions, GitLab CI, Jenkins).<br \/>\n* Automatically generate a software bill of materials (CycloneDX or SPDX format) to catalog all packages, transitively imported libraries, and base image layers.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Step_3_CICD_Pipeline_Attestation_and_Policy_Enforcement\"><\/span>Step 3: CI\/CD Pipeline Attestation and Policy Enforcement<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Transition from passive scanning to active policy gates:<br \/>\n* Verify image integrity using cryptographic signing tools (such as Cosign) backed by Panoptica policy verification.<br \/>\n* Apply pipeline guardrails based on SLSA (Supply-chain Levels for Software Artifacts) standards to guarantee artifact provenance.<br \/>\n* Configure build break conditions: fail builds on exploitable Critical\/High CVEs with known public exploit vectors, while passing low-severity findings directly into backlog tracking.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Step_4_Kubernetes_Admission_Control_and_Deployment_Hardening\"><\/span>Step 4: Kubernetes Admission Control and Deployment Hardening<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Guard target clusters against non-compliant workload deployments:<br \/>\n* Deploy the Panoptica Controller and Admission Webhook to Kubernetes clusters.<br \/>\n* Validate that newly scheduled workloads adhere to standard Pod Security Standards (blocking privileged containers, requiring read-only root filesystems, and restricting hostPID access).<br \/>\n* Automatically inject microsegmentation policies informed by Isovalent Cilium networking definitions.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Step_5_Automated_Remediation_and_Telemetry_Feedback\"><\/span>Step 5: Automated Remediation and Telemetry Feedback<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Close the loop by connecting runtime telemetry to developer workspaces:<br \/>\n* Route confirmed runtime vulnerability alerts through Panoptica\u2019s GenAI Dynamic Remediation engine to generate code-level pull requests for developers.<br \/>\n* Synchronize cluster event logs and Tetragon security events directly with Splunk to maintain an audit trail for the security operations team.<\/p>\n<hr \/>\n<h2><span class=\"ez-toc-section\" id=\"Enterprise_Licensing_Packaging_and_Pricing_Models\"><\/span>Enterprise Licensing, Packaging, and Pricing Models<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Procurement models for Cisco DevSecOps solutions reflect standard modern enterprise software practices, blending SaaS consumption with broader Cisco procurement agreements.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_is_Cisco_Panoptica_priced_and_licensed\"><\/span>How is Cisco Panoptica priced and licensed?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Panoptica is licensed as a SaaS subscription based on workload and node counts. Pricing scales primarily on the number of monitored cloud workloads, which typically include Kubernetes worker nodes, virtual machine instances, and protected serverless function invocations. Tiered packages allow organizations to unlock CSPM, CWPP, and advanced API security based on their operational scope.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Can_teams_evaluate_the_platform_without_an_enterprise_contract\"><\/span>Can teams evaluate the platform without an enterprise contract?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yes. Cisco and Outshift offer trial tiers and community programs for developers and platform teams. Teams can onboard initial cloud accounts or Kubernetes clusters at no cost to evaluate image vulnerability scanning, SBOM generation, and configuration posture prior to commercial deployment.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_does_Panoptica_fit_into_a_Cisco_Enterprise_Agreement_EA\"><\/span>How does Panoptica fit into a Cisco Enterprise Agreement (EA)?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Panoptica can be purchased stand-alone or incorporated into a Cisco Security Choice Enterprise Agreement (EA). Customers with an active Cisco EA can consolidate licensing, apply predictable enterprise volume pricing, co-terminate software terms, and move licensing entitlements flexibly across Cisco Security Cloud products as infrastructure demands evolve.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_does_the_Splunk_acquisition_affect_DevSecOps_tooling_costs\"><\/span>How does the Splunk acquisition affect DevSecOps tooling costs?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Splunk capabilities are structured around either compute workload capacity or daily data ingest (GB\/day), depending on whether organizations deploy Splunk Cloud or on-premises Splunk Enterprise. Workload-based pricing tiers align closely with Panoptica\u2019s node metrics, allowing unified telemetry collection without unpredictable ingest billing surprises.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Are_open-source_tools_like_Isovalent_Cilium_free_to_use_alongside_Cisco\"><\/span>Are open-source tools like Isovalent Cilium free to use alongside Cisco?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The core Cilium, Hubble, and Tetragon projects remain open-source software managed under the Cloud Native Computing Foundation (CNCF) and open-source licenses. Organizations can run the open-source variants freely; however, enterprise deployments requiring 24\/7 SLAs, advanced multi-cluster management, regulatory compliance validation, and integrated Splunk SIEM connectors are licensed through Isovalent Enterprise by Cisco.<\/p>\n<hr \/>\n<h2><span class=\"ez-toc-section\" id=\"Technical_Specifications_Blueprints_and_Official_Reference_Portals\"><\/span>Technical Specifications, Blueprints, and Official Reference Portals<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>For enterprise architects and security engineers looking to review formal blueprints and APIs, the following technical specifications summarize Cisco&#8217;s cloud-native security framework:<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Architecture_and_Component_Specifications\"><\/span>Architecture and Component Specifications<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Panoptica SaaS Control Plane:<\/strong> Multi-tenant or dedicated cloud controller delivering continuous vulnerability scoring, policy calculation, and attack surface graph processing.<\/li>\n<li><strong>Kubernetes In-Cluster Agent:<\/strong> Deployed via Helm charts or GitOps operators as a non-privileged controller alongside an admission webhook.<\/li>\n<li><strong>Isovalent Tetragon Engine:<\/strong> eBPF-based runtime enforcement agent deployed as a <code>DaemonSet<\/code> on Linux kernel versions 5.4+ (optimized for kernel 5.10 and later).<\/li>\n<li><strong>Network &amp; API Sensor:<\/strong> Integrated via Istio service mesh, Envoy sidecars, or Cilium CNI to analyze L7 HTTP\/REST\/gRPC traffic without routing disruptions.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Primary_Developer_and_Administrative_Portals\"><\/span>Primary Developer and Administrative Portals<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Cisco Panoptica Technical Documentation (<code>panoptica.readme.io<\/code>):<\/strong> Primary documentation covering REST API specifications, CI\/CD plugins, AWS\/Azure\/GCP onboarding scripts, and attack path graph queries.<\/li>\n<li><strong>Cisco DevNet (<code>developer.cisco.com<\/code>):<\/strong> Official software development and API portal providing SDKs, automated workflows, and code samples for Cisco Security Cloud integrations.<\/li>\n<li><strong>Outshift Open Source Repositories (<code>github.com\/outshift<\/code>):<\/strong> Public source code for tools including KubeClarity, OpenClarity, and AI agent runtime specifications.<\/li>\n<li><strong>Splunk Lantern and CIM Specifications (<code>docs.splunk.com<\/code>):<\/strong> Technical documentation covering the Common Information Model (CIM) and configuration of the Cisco Security Cloud Technology Add-on for Splunk.<\/li>\n<\/ul>\n<hr \/>\n<p>By anchoring its platform to eBPF kernel visibility, API runtime defense, and Splunk\u2019s deep analytics engine, Cisco provides an architectural model that unites developers, platform teams, and the SOC into a single, cohesive workflow. Organizations implementing this ecosystem achieve what traditional DevSecOps always intended: rapid development velocity paired with comprehensive, continuous security assurance.<\/p>\n<div class='sfsi_Sicons' style='width: 100%; display: inline-block; vertical-align: middle; text-align:left'><div style='margin:0px 8px 0px 0px; line-height: 24px'><span>Please follow and like us:<\/span><\/div><div class='sfsi_socialwpr'><div class='sf_fb_share sf_icon' style='text-align:left;vertical-align: middle;'><a href='https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fcciedump.spoto.net%2Fblog%2Fwhat-is-cisco-doing-differently-in-devsecops_24332.html' style='display:inline-block;'  > <img class='sfsi_wicon'  data-pin-nopin='true' width='auto' height='auto' alt='fb-share-icon' title='Facebook Share' src='https:\/\/cciedump.spoto.net\/blog\/wp-content\/plugins\/ultimate-social-media-icons\/images\/visit_icons\/fbshare_bck.png'  \/><\/a><\/div><div class='sf_twiter sf_icon' style='display: inline-block;vertical-align: middle;width: auto;margin-left: 7px;'>\r\n\t\t\t\t\t\t<a target='_blank' href='https:\/\/twitter.com\/intent\/tweet?text=What+Is+Cisco+Doing+Differently+in+the+Space+of+DevSecOps%3F+https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html'style='display:inline-block' >\r\n\t\t\t\t\t\t\t<img data-pin-nopin= true width='auto' class='sfsi_wicon' src='https:\/\/cciedump.spoto.net\/blog\/wp-content\/plugins\/ultimate-social-media-icons\/images\/visit_icons\/en_US_Tweet.svg' alt='Tweet' title='Tweet' >\r\n\t\t\t\t\t\t<\/a>\r\n\t\t\t\t\t<\/div><div class='sf_pinit sf_icon' style='text-align:left;vertical-align: middle;float:left;line-height: 33px;width:auto;margin: 0 -2px;'><a href='#'  onclick='sfsi_pinterest_modal_images(event,\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\",\"What Is Cisco Doing Differently in the Space of DevSecOps?\")' style='display:inline-block;'  > <img class='sfsi_wicon'  data-pin-nopin='true' width='auto' height='auto' alt='fb-share-icon' title='Pin Share' src='https:\/\/cciedump.spoto.net\/blog\/wp-content\/plugins\/ultimate-social-media-icons\/images\/share_icons\/Pinterest_Save\/en_US_save.svg'  \/><\/a><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>For most modern engineering organizations, DevSecOps has historically fallen short of its promise. Instead of fostering frictionless collaboration between developers, security teams, and platform operators, standard tooling often creates a noisy chasm: static security scanners dump thousands of theoretical vulnerabilities into developer backlogs, while runtime security teams lack the source-code and build-pipeline context needed to&#8230; &raquo; <a class=\"read-more-link\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\">read more<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,608],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v18.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What Is Cisco Doing Differently in the Space of DevSecOps? - SPOTO Official Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is Cisco Doing Differently in the Space of DevSecOps? - SPOTO Official Blog\" \/>\n<meta property=\"og:description\" content=\"For most modern engineering organizations, DevSecOps has historically fallen short of its promise. Instead of fostering frictionless collaboration between developers, security teams, and platform operators, standard tooling often creates a noisy chasm: static security scanners dump thousands of theoretical vulnerabilities into developer backlogs, while runtime security teams lack the source-code and build-pipeline context needed to... &raquo; read more\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\" \/>\n<meta property=\"og:site_name\" content=\"SPOTO Official Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-03T04:03:20+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SPOTO \u7f16\u8f91\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638\",\"name\":\"SPOTO Club\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg\",\"contentUrl\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg\",\"caption\":\"SPOTO Club\"},\"logo\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#personlogo\"},\"description\":\"SPOTO is an excellent leader in IT certification training for 20+ years. We offer 100% real Cisco CCNA, CCNP exam dumps, CCIE Lab study materials, PMP, CISA, CISM, AWS, Palo Alto, and other IT exam dumps. We have helped thousands of candidates around the world to pass their IT exams on the first try! As the first-class online IT training organization in China, SPOTO cooperates with many giant Internet companies in China like Tencent, Baidu, and Alibaba. What\u2019s more, we have won lots of awards in IT education training such as \u201cTop Ten Influential Brands In Online Education Industry\u201d given by Baidu, \u201cOfficial IT Online Training Organization\u201d awarded by Tencent Class, etc. Join us: https:\/\/cciedump.spoto.net\/ Contact us: E-mail: support@spoto.net Phone \/ WhatsApp: +86 18344981205\",\"sameAs\":[\"https:\/\/cciedump.spoto.net\/\"]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#website\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/\",\"name\":\"SPOTO Official Blog\",\"description\":\"Focus on Online IT Training for 20+ Years\",\"publisher\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cciedump.spoto.net\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#webpage\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\",\"name\":\"What Is Cisco Doing Differently in the Space of DevSecOps? - SPOTO Official Blog\",\"isPartOf\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#website\"},\"datePublished\":\"2026-11-03T04:03:20+00:00\",\"dateModified\":\"2026-11-03T04:03:20+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cciedump.spoto.net\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is Cisco Doing Differently in the Space of DevSecOps?\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#webpage\"},\"author\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1\"},\"headline\":\"What Is Cisco Doing Differently in the Space of DevSecOps?\",\"datePublished\":\"2026-11-03T04:03:20+00:00\",\"dateModified\":\"2026-11-03T04:03:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#webpage\"},\"wordCount\":2009,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638\"},\"articleSection\":[\"CCNA Certification\",\"Cisco Certification\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#respond\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1\",\"name\":\"SPOTO \u7f16\u8f91\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507\",\"contentUrl\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507\",\"caption\":\"SPOTO \u7f16\u8f91\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Is Cisco Doing Differently in the Space of DevSecOps? - SPOTO Official Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html","og_locale":"en_US","og_type":"article","og_title":"What Is Cisco Doing Differently in the Space of DevSecOps? - SPOTO Official Blog","og_description":"For most modern engineering organizations, DevSecOps has historically fallen short of its promise. Instead of fostering frictionless collaboration between developers, security teams, and platform operators, standard tooling often creates a noisy chasm: static security scanners dump thousands of theoretical vulnerabilities into developer backlogs, while runtime security teams lack the source-code and build-pipeline context needed to... &raquo; read more","og_url":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html","og_site_name":"SPOTO Official Blog","article_published_time":"2026-11-03T04:03:20+00:00","twitter_card":"summary_large_image","twitter_misc":{"Written by":"SPOTO \u7f16\u8f91","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Person","Organization"],"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638","name":"SPOTO Club","image":{"@type":"ImageObject","@id":"https:\/\/cciedump.spoto.net\/blog\/#personlogo","inLanguage":"en-US","url":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg","contentUrl":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg","caption":"SPOTO Club"},"logo":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#personlogo"},"description":"SPOTO is an excellent leader in IT certification training for 20+ years. We offer 100% real Cisco CCNA, CCNP exam dumps, CCIE Lab study materials, PMP, CISA, CISM, AWS, Palo Alto, and other IT exam dumps. We have helped thousands of candidates around the world to pass their IT exams on the first try! As the first-class online IT training organization in China, SPOTO cooperates with many giant Internet companies in China like Tencent, Baidu, and Alibaba. What\u2019s more, we have won lots of awards in IT education training such as \u201cTop Ten Influential Brands In Online Education Industry\u201d given by Baidu, \u201cOfficial IT Online Training Organization\u201d awarded by Tencent Class, etc. Join us: https:\/\/cciedump.spoto.net\/ Contact us: E-mail: support@spoto.net Phone \/ WhatsApp: +86 18344981205","sameAs":["https:\/\/cciedump.spoto.net\/"]},{"@type":"WebSite","@id":"https:\/\/cciedump.spoto.net\/blog\/#website","url":"https:\/\/cciedump.spoto.net\/blog\/","name":"SPOTO Official Blog","description":"Focus on Online IT Training for 20+ Years","publisher":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cciedump.spoto.net\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#webpage","url":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html","name":"What Is Cisco Doing Differently in the Space of DevSecOps? - SPOTO Official Blog","isPartOf":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#website"},"datePublished":"2026-11-03T04:03:20+00:00","dateModified":"2026-11-03T04:03:20+00:00","breadcrumb":{"@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cciedump.spoto.net\/blog"},{"@type":"ListItem","position":2,"name":"What Is Cisco Doing Differently in the Space of DevSecOps?"}]},{"@type":"Article","@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#article","isPartOf":{"@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#webpage"},"author":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1"},"headline":"What Is Cisco Doing Differently in the Space of DevSecOps?","datePublished":"2026-11-03T04:03:20+00:00","dateModified":"2026-11-03T04:03:20+00:00","mainEntityOfPage":{"@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#webpage"},"wordCount":2009,"commentCount":0,"publisher":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638"},"articleSection":["CCNA Certification","Cisco Certification"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cciedump.spoto.net\/blog\/what-is-cisco-doing-differently-in-devsecops_24332.html#respond"]}]},{"@type":"Person","@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1","name":"SPOTO \u7f16\u8f91","image":{"@type":"ImageObject","@id":"https:\/\/cciedump.spoto.net\/blog\/#personlogo","inLanguage":"en-US","url":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507","contentUrl":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507","caption":"SPOTO \u7f16\u8f91"}}]}},"_links":{"self":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/posts\/24332"}],"collection":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/comments?post=24332"}],"version-history":[{"count":0,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/posts\/24332\/revisions"}],"wp:attachment":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/media?parent=24332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/categories?post=24332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/tags?post=24332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}