DevOps is well known today. Even when people in practice primarily focus on CI/CD. What is often neglected here are security requirements. With DevSecOps the “Sec” is given an appropriate significance again. The lecture will look at where the typical security problems in the DevOps environment lie, where they come from and what is necessary and possible to improve security again. Both in traditional and in cloud environments. The talk will be complemented by a demo that shows a cloud based CI/CD pipeline with tools and measures to enhance security from Dev to Prod as well as handling and best practices to make this effective.