G2

abe s.

Technical Lead

Small-Business (50 or fewer emp.)

9/29/2026

"Practical DevSecOps: Excellent Hands-On Labs and Cloud Environments"

4.5/5

What do you like best about Practical DevSecOps?

Very hands-on product. Labs spin up relatively smoothly, and they set you up with a complete cloud dev environment so you can jump right into implementation without any downtime. They cover key concepts and software that you're most likely to encounter in professional scenarios (containerization, configuration management of security tools, and various security automation technologies). It provides a great foundation for a broad knowledge base, though it is ultimately up to you as the user to dig deeper into each individual technology. Review collected by and hosted on G2.com.

What do you dislike about Practical DevSecOps?

There are times when certain labs don't work as expected, even if you follow the directions step-by-step (though this is few and far between). These issues might stem from high concurrency, where many users are using the product simultaneously and causing unexpected behavioral bugs. However, the vast majority of problems can be resolved by signing in via incognito mode, resetting the labs, or switching to a different lab. Since there is a wide variety of labs available, it’s easy to move on and return to a problematic one later.

Finally, there isn't a native way to SSH into their infrastructure to manage labs directly from your own local terminal. This can be a drawback if you dislike their web-based lab GUI. While a motivated student could potentially code a custom workaround, doing so might distract from the core learning objectives of the labs depending on how you look at it. Review collected by and hosted on G2.com.

What problems is Practical DevSecOps solving and how is that benefiting you?

Practical DevSecOps tackles the industry wide shortage of security engineers by closing the gap between traditional DevOps and modern application security. Rather than leaning on theory alone, it focuses on practical, hands-on work that shows how to embed automated security tools directly into CI/CD pipelines. covering SAST, DAST, dependency scanning, container security, and OS hardening automation.

On a personal level, it replaced theoretical concepts with actual implementation. It took away the guesswork behind automated security controls, giving me the practical skills to build secure pipelines, catch vulnerabilities early in development, and close existing security gaps in real-world environments. Review collected by and hosted on G2.com.