MODERN METHODOLOGIES FOR ORGANIZING DEVOPS PROCESSES IN WEB DEVELOPMENT

The article analyzes methods for organizing DevOps processes in web development, with particular attention given to the integration of information security measures through the DevSecOps paradigm. The study is based on an extensive review of literature available in open sources, which helped identify a set of tools and techniques currently in use. The evolution of DevOps methods has revealed information security gaps that arise during the release of updates, justifying the need for a transformational approach—the so-called “left shift,” which involves incorporating security measures early in the development lifecycle. The research systematizes both organizational and technical aspects: it examines cross-functional interaction mechanisms and the applicability of static (SAST), dynamic (DAST), and interactive (IAST) security analysis, threat modeling, and Infrastructure as Code (IaC) management tools, along with monitoring and controlling access to confidential information. The recommendations for DevSecOps integration presented in this work aim to reduce vulnerabilities, improve the quality of the developed software product, and accelerate release processes. The results outlined in this research possess practical value for IT specialists, DevOps engineers, system architects, and researchers seeking to implement innovative approaches in continuous integration and delivery to build resilient digital ecosystems.