# DevSecOps

URL: https://donedeploy.com/devops-services/security-and-compliance/

[!AI · September 25, 2026Hosted LLM APIs or Self-Hosted Open Models?GPT, Claude and Gemini APIs against self-hosted open models, compared on cost, privacy, latency and the engineering effort each one needs.](https://donedeploy.com/hosted-or-self-hosted-llm/)[!AI · September 16, 2026RAG in Production: The Boring Parts That MatterIngestion, chunking, refresh, evaluation and access control: the unglamorous work that decides whether a RAG system can be trusted.](https://donedeploy.com/rag-in-production/)

Related services

## Often done together

[**CI/CD and GitOps**Releases that are routine, reviewed and easy to roll back*Learn more »*](https://donedeploy.com/devops-services/ci-cd/)[**Configuration management**Servers configured the same way, every time, from code*Learn more »*](https://donedeploy.com/devops-services/configuration-management/)[**After launch**Infrastructure that keeps getting cheaper, faster and safer after launch*Learn more »*](https://donedeploy.com/devops-services/continuous-improvement/)

Questions

## Frequently asked

What is DevSecOps?

DevSecOps means security checks and practices are part of how code and infrastructure are built and released every day, rather than a separate step at the end.

Can you get us certified for ISO 27001 or SOC 2?

Certification is granted by an independent auditor, not by us. We help with the technical side: the controls, the evidence and the records an auditor will ask for.

Will security checks slow our releases down?

They are designed not to. Checks run automatically in the pipeline, and findings are sorted so only the ones that matter stop a release.

Tell us what you run and what you want to change. We reply personally, and the first consultation is free.

[Let's talk »](https://donedeploy.com/lets-talk/)