Home  /  About us  /  Service Portfolio  /  Customer Area  /  Standard Product as a Service (SPraaS) Catalogue  /  DevSecOps Service

DevSecOps Service

Service ID: PLT008

👉 Submit Customer Request

The PLT008 DevSecOps Service provides a security-accredited, multi-cloud DevSecOps platform that enables the NATO Software Factory (NSF) as a common collaboration, engineering, and integration environment for software development and testing activities. The service supports the end-to-end software application lifecycle, including requirements management, design, development, integration, testing, and delivery, using standardised DevSecOps practices, automation, and security-by-design principles.

PLT008 is delivered as a Platform as a Service (PaaS) and is available to internal and external NCIA customers. It enables secure collaboration between NCIA, NATO bodies, Nations, Industry, and Academia. The DevSecOps platform operates primarily on Microsoft Azure and integrates with Microsoft 365 collaboration services. It also supports AWS-based target environments, as well as hybrid environments, in coherence with NATO cloud policy and security accreditation requirements. The PLT008 DevSecOps Service provides customers with a secure, standardised, and accredited platform that significantly improves the way software is developed, tested, and delivered within NATO.

Available on: Hybrid, Public Cloud (NU)

Service Features:

The PLT008 DevSecOps Service provides a set of integrated platform features that together enable secure, standardised, and automated software development, testing, and delivery within the NATO Software Factory. The features below describe the core technical and operational capabilities made available to customers as part of the service.

 NSF Standard Profile:

Provides access to all NSF services. This is required for most users. Typical use: Developers, Engineers, Testers.

 NSF Stakeholder Profile:

Provides access to NSF Team stakeholders without having to procure a NSF Basic User Profile. The stakeholder will be able to use VPN client to join events such as specific test events, User Acceptance Test (UAT) and Demonstrations.

 NSF Jira Profile:

Limited NSF user profile that only grants access to JIRA. Typical use: Customer representatives (JIRA based projects), JIRA project management (non-software).

 NSF ADO Profile:

Limited NSF user profile that only grants stakeholder access to Azure DevOps (allows access to wiki and work items only). Typical use: Customer representatives and project managers (ADO based projects).

 NSF GitLab Profile:

Limited NSF user profile that only grants access to GitLab. Typical use: Repository sharing with external collaborators (e.g. partners from NATO nations).

 For NSF standard profile the following services are available as additional options:

NATO Trusted Container building service:

• Service flavour to consume a centralized pipeline to build trusted application containers
• Security vulnerability and compliancy assessment using automated scanning tools
• Promotion to NATO Trusted Container Registry for use of containers on operational networks
• Security Validator- Based on the findings, mitigations, justifications, and other relevant container characteristics, the Security Validator assigns a container image a trust level and documents any restrictions regarding its deployment

NATO Trusted Container registry consumption service:

• Container platform to consume the NATO Trusted Container Registry on operational networks.
• Requires a diode to transfer container images from low to high using 1-way diode
• Centralized high-available container registry on NS

NSF Managed Endpoint: secured managed baseline for end-user devices accessing NSF resources:

• Unified endpoint management - cloud based endpoint management, security hardening and compliance management, apps management, content management
• Endpoint Protection Platform - security protection via Microsoft Defender for Endpoint, EDR (endpoint protection and response) and threat hunting integration with NSF Security Operations (SOC)

Service Cost / Price: The customer can compose the desired service offering mixing and matching above flavors. Licenses, toolchain access and basic support are charged as part of the NSF user profiles, unless explicitly separated. Cloud consumption is to be procured through Azure Credits. 

Service ID: PLT009 

Underlying Services: PLT008

Electronic Definitive Media Library (EDML) service is available to customers to meet the demand for media delivery. Example of media are COTS SW, NATO FAS, artefacts, Geographical datasets, graphics and documentation. The service is available from the public cloud, Microsoft Azure.

Service Features: The Electronic Definitive Media Library provides a secure one-stop-shop for NATO software and media, accessible from anywhere in the world. It offers a number of specific benefits including user registration and controlled user access, public key encryption and access logging and auditing.

  NATO App Store:

Allows NATO Nations and NATO Partners, which have signed a NST Licence agreement with NATO to download NATO software tools used for testing, evaluation and operational purposes.

  Multi-tenant Media Delivery (SaaS):

Data segregation between EDML instances

• RBAC access mode with tenant administration accountability to customers whereas main root administration is ensured by the service provider
• Upload of media via the Uploader App, which encrypts the media before the move to public cloud service provider datacentre
• Visibility and transparency over service cost consumption from the service provider;
• Access the EDML Decrypter App required for the download of media

Service Cost / Price: The unit of measure of NATO App Store service flavour is 1. The Multi-tenant flavour is costed per instance. The total of the Service delivery cost is charged in accordance with specifically arranged conditions of the Service delivery.