Kategorien durchsuchen
Entdecken
Fiverr Pro
Deutsch
$
USD
I will perform a devsecops and ci cd pipeline security audit
Vetted Pro
Brasilien
Ich spreche Englisch, Portugiesisch, Spanisch, Französisch
7 Aufträge abgeschlossen
Lead Security Architect for Hybrid Cloud, IAM and Zero Trust
Lead Security Architect, 14+ years, ex-IBM and TOTVS. Vetted Pro in Cybersecurity and Cloud Computing.
I make sure the right people can reach the right systems and nobody else can. In practice that m...
Geprüft von Fiverr Pro
Marlon Costa wurde vom Fiverr Pro-Team aufgrund besonderer Expertise ausgewählt.
Geprüft für
Cloud-Computing
Cybersicherheit
Über diesen Service
Vetted Pro
Is your software delivery pipeline a backdoor into your production environment?
You will get a professional DevSecOps and CI/CD Pipeline Security Audit to identify control weaknesses and vulnerabilities across your software supply chain.
Engineering velocity shouldn't compromise security. I deliver an architecture-led review covering the critical areas of modern deployment pipelines.
What this audit evaluates:
- Repository & Branch protection rules
- Secrets handling (API keys, tokens)
- Build and Runner environment security
- Artifact integrity and dependency checks
- Deployment approval workflows
What you will receive:
- Prioritized Pipeline Risk Assessment
- DevSecOps Improvement Roadmap
- Practical guardrail recommendations
This assessment helps engineering and security teams implement "Shift-Left" security without destroying developer productivity.
Please send me a message or book a Consultation Call through my profile before ordering to align on your CI/CD tooling (GitHub, GitLab, etc).
Technologie:
Cloud - IaaS
•
Monitoring
•
SaaS
•
Web-Applikation
•
Andere
Bestimmungen:
Andere
Mein Portfolio
Meine weiteren Dienstleistungen im Bereich Cybersicherheit
FAQ
Do you need direct access to our CI/CD environment?
No. In many cases, I can work from documentation, screenshots, exported configurations, workflow files, architecture diagrams, and live walkthroughs. If limited read-only access is available, we can define an appropriate review model.
What kinds of issues can this assessment identify?
This assessment can highlight risks related to repository controls, branch protections, approval workflows, secrets handling, build security, runner exposure, artifact integrity, deployment controls, and pipeline traceability.
Is this a penetration test or a formal compliance audit?
No. This project is a security review and advisory assessment. It is designed to identify control gaps, delivery risks, and practical hardening priorities, but it is not a penetration test or an official audit unless separately defined.
What will I receive at the end of the project?
Depending on the selected tier, you will receive a structured assessment with findings, risk observations, practical recommendations, and, in higher tiers, a more detailed roadmap and executive-ready summary.
Can this assessment cover platforms like GitHub, GitLab, or Azure DevOps?
Yes. This project can be applied to common DevSecOps and CI/CD platforms as long as the scope, workflows, and available evidence are clearly defined.
