DevSecOps Foundation
DevSecOps Foundation℠
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The DevSecOps Foundation℠ certification, offered by DevOps Institute, is a credential for professionals who want to embed security into DevOps workflows. It targets a broad audience: compliance team and delivery staff, project and product managers, IT managers, IT security professionals, practitioners and managers, site reliability engineers, DevOps engineers, software engineers, maintenance and support staff, managed service providers, quality assurance teams, release managers, Scrum Masters, and testers. The exam is a 40-question, multiple-choice, web-based test delivered in 60 minutes with a 65% passing score. It is open book and available in English, Brazilian Portuguese, Chinese, and Japanese. The certification is valid for three years from the original certification date, after which renewal is required to keep skills and the credential current. The exam blueprint covers nine areas: Why DevSecOps?; Culture and Management; Strategic Considerations; General Security Considerations; IAM: Identity and Access Management; Application Security; Operational Security; Governance, Risk, Compliance (GRC) and Audit; and Logging, Monitoring, and Response. Preparation options include instructor-led training, online learning, and self-study; candidates can find an authorized partner or purchase the exam through the PeopleCert platform, as DevOps Institute is a member of PeopleCert Group. The credential aims to help organizations develop secure-by-design software, improve assurance of meeting security, compliance, legal, and regulatory requirements, foster frictionless relationships between security professionals and developers, and build scalable, speed-aware security practices. For individuals, it builds understanding of DevSecOps' contribution to GRC and business value, the idea that security and speed are not inversely related, the role of tools and automation, and the cultural shift needed to move security left.
What you'll study
About DevSecOps Foundation preparation
What is the exam format and how long does it take?
The exam consists of 40 multiple-choice questions delivered web-based. You have 60 minutes to complete it. It is open book, so you may reference materials during the exam. The passing score is 65%. The exam is available in English, Brazilian Portuguese, Chinese, and Japanese.
How much does the exam cost?
The source page does not list a fee. Pricing is handled through the PeopleCert platform, where you complete the purchase. Check the PeopleCert website for current pricing and any regional variations.
How difficult is the exam and what is the passing score?
The passing score is 65%, which means you need to answer at least 26 of 40 questions correctly. Difficulty depends on your familiarity with DevSecOps concepts. The exam covers nine domains, so a broad understanding is more important than deep specialization in one area.
Can I retake the exam if I fail?
The source does not specify a retake policy. Contact DevOps Institute or PeopleCert for details on retakes, waiting periods, and any associated fees.
How long is the certification valid?
The certification is valid for three years from the original certification date. After that, you must renew to keep your skills and certification relevant. Renewal requirements are described in the Continuous Professional Development section on the DevOps Institute site.
What topics does the exam cover?
The exam blueprint includes nine areas: Why DevSecOps?; Culture and Management; Strategic Considerations; General Security Considerations; IAM: Identity and Access Management; Application Security; Operational Security; Governance, Risk, Compliance (GRC) and Audit; and Logging, Monitoring, and Response.
How should I prepare for the exam?
DevOps Institute lists instructor-led training, online learning, and self-study as preparation options. You can find an authorized partner through their website. Reviewing the certification blueprint and focusing on the nine domains will help you structure your study.
What are common failure modes for this exam?
Candidates often underestimate the breadth of the nine domains or rely too heavily on hands-on experience without covering governance, risk, and compliance topics. Since the exam is open book, poor time management or unfamiliarity with where to find information can also lead to failure. Aim to understand concepts, not just memorize terms.
Is the exam open book?
Yes, the exam is open book. You may consult reference materials during the test. However, because of the 60-minute limit for 40 questions, you should still prepare thoroughly so you do not waste time searching for answers.
Where do I buy the exam and complete the application?
You purchase the exam and complete your application on the PeopleCert website. DevOps Institute is a member of PeopleCert Group, and you will be redirected to their platform to finish the process. The source notes a platform transition that was scheduled for November 15, 2023; confirm the current platform before registering.