--- title: "Secure Software Development & Application Security" description: "Integrate security across the software development lifecycle on STACKIT: SSDLC, application security, secure delivery, and supply chain security." scfAsset: managed: false category: "guide" maintainers: - user: "can.celik1" external: true tags: ["STACKIT University", "Learning", "AppSec", "DevSecOps", "Supply Chain"] source_url: "https://framework.stackit.cloud/architecture/assetcontainer/stackit/secure-software-development-application-security/" source_file: "docs/architecture/assetcontainer/stackit/secure-software-development-application-security.mdx" --- ## Course Overview Security works best when it's built into the development lifecycle, not bolted on before deployment. This course introduces the principles, practices, and controls that help teams build, deploy, and maintain secure applications on STACKIT — from development workflow through deployment pipeline to production operations. Across four modules it covers the Secure Software Development Lifecycle (SSDLC) and DevSecOps practices, common application security risks and how to reduce them, how security controls integrate into build and deployment pipelines, and the risks tied to third-party dependencies, container images, and build systems. ### What You'll Learn - Understand the principles of the Secure Software Development Lifecycle (SSDLC) - Apply secure development practices throughout the software lifecycle - Understand common application security risks and how to reduce vulnerabilities - Use STACKIT Git for secure and compliant code management - Understand how security controls integrate into CI/CD pipelines - Apply security best practices to Infrastructure as Code (IaC) - Understand software supply chain security and third-party dependency management ### Modules - Secure Software Development Fundamentals - Application Security Fundamentals - Secure Delivery & Deployment - Software Supply Chain Security