Website of Chuck Easttom, Ph.D., D.Sc.

A graphic showing software programming

DevSecOps

This site is a general resrouce for DevSecOps and contains material related to a DoD DevSecOps course taught by Dr. Easttom.

Note: this page is being updated regularly, you shoudl check back from time to time. The lastest update date will always be displayed here 9/11/2026

Hypersonics| DevSecOps |  Cryptography | Quantum Computing | AI/ML |
Systems Engineering |  Cybersecurity |Neuroscience and Brain Computer Interface | Digital Forensics

DoD Resources
DoD DevSecOps Fundamentals
DoD Enterprise DevSecOps Strategy Guide
DISA DevSecOps
DevSecOps Fundamentals Guidebook: DevSecOps Tools & Activities
Grogu's guide to DevSecOps
Navy DevSecOps
DoD Enterprise DevSecOps Reference Design: CNCF Kubernetes
DSAWG DevSecOps
DEVSECOPS System Assurance


Online Labs
Dr. Easttom's online Kubernetes Lab
Dr. Easttom's online DevSecOps Labs
Dr. Easttom's online Linux Lab
Dr. Easttom's online SQL Lab
Dr. Easttom's online cybersecurity concepts Lab
Dr. Easttom's online web attack lab
Dr. Easttom's online Cyber Threat Modeling
Dr. Easttom's onlin Secure Coding Lab
Dr. Easttom's online Zero Trust Simulator
Hackme DevSecOps
Online VMs for Kubernetes and Docker
Kubernetes Playground
Kubernetes Public Playgrounds
Docker Tutorials




Course Materials
Available on request to those taking Dr. Easttom's DevSecOps course.












Tools
Aikido (IaC Scanner)
Checkov (Policy as Code)
 Chef (Compliance Tool)
 Falco (Cloud Security Scanner)
 Fossil (Configuration Management)
 GitHub (Code Repository)
GitLab (Code Repository)
GitLeaks (Finding data leaks)
Jenkins (DevSecOps tool)
 JFrog (Multiple DevSecOps tools)
 Jira (Code Repository/Communications)
Jit (AppSec Platform)
OpenTofu (Infrastructure as Code)
OWASP ZAP (DAST tool)
PMD (Open source SAST tool)
 Puppet (Security Compliance Manager)
 SemGrep (SAST tool)
 Snyk (Infrastructer as Code/Vulnerability Scanning)
SpaceLift (Infrastructure as Code)
Apache Subversion (Source Code Control)
 Terraform (Infrastructure as Code)
 Google Code Search Diggity
Visual Code Grepper
 SonarCube

Certifications & Training
EC Council DevSecOps Certified Engineer
Microsoft Azure DevOps Certified
DevSecOps Certification
DevSecOps Foundation Certification
Certified Kubernetes Security Specialist
Google DevSecOps Course