Training, exams and certification
Training, exams and certification
Forty questions in sixty minutes, open book, twenty-six to pass — mechanically identical to DevOps Foundation. Two things differ, and one of them will decide whether you can sit it at all.
Reviewed by GoToCertify’s accredited trainers
The DevSecOps Foundation certificate covers security as a property of the delivery pipeline rather than a stage at the end of it.
| Questions | 40, multiple choice |
|---|---|
| Duration | 60 minutes |
| Pass mark | 65% — 26 correct answers out of 40 |
| Materials | Open book |
| Prerequisites | None |
| Accredited training | Not required |
| Languages | Four — English, Chinese, Japanese and Portuguese (Brazil). The Learning Resource Kit is English only |
| Renewal | Every three years, with 30 CPD points |
This is the practical difference between the two DevOps Foundation papers, and it is easy to miss when the format is identical.
| DevOps Foundation | Eight languages: English, Chinese, French, German, Japanese, Polish, Portuguese (Brazil), Spanish |
|---|---|
| DevSecOps Foundation | Four languages: English, Chinese, Japanese, Portuguese (Brazil) |
| Learning Resource Kit | English only, for DevSecOps |
No French, no German, no Spanish, no Italian. If English is not your working language, the study material will be in English whatever you do — and the exam probably will be too.
The other difference is renewal: 30 CPD points every three years here, against 60 for DevOps Foundation.
Count them: five of the eight are security proper, and three are about how a team works. That balance is the argument the certificate is making — that DevSecOps is a security discipline practised by delivery teams, not a delivery discipline with a security review bolted on.
It also means a candidate arriving from DevOps Foundation has roughly three familiar areas and five new ones, while a candidate arriving from a security background has the reverse. Neither starts from scratch; both have a real gap.
Ninety seconds a question with the materials open. As with DevOps Foundation, that affords about four or five real lookups across the paper — enough to settle a doubt, not enough to study during the exam.
Fourteen wrong answers is the margin, and with eight areas at roughly five questions each, losing one area outright costs a third of it.
Check the language before you book. Four options, and the kit is English only.
Work out which half is your gap. Three areas on culture and management, five on security — one of those halves is where your time should go.
Learn IAM and GRC properly. They are the areas engineers most often wave at and the exam most often asks about precisely.
No. DevSecOps Foundation has no prerequisites.
Twenty-six correct answers out of forty. The published figure is 65%.
Four: Chinese, English, Japanese and Portuguese (Brazil). The Learning Resource Kit is English only.
Yes, with sixty minutes for forty questions.
Every three years, with 30 CPD points — half what DevOps Foundation requires.
No. An exam voucher can be purchased on its own.
Sources. Every figure on this page comes from PeopleCert’s own published certification pages, checked in September 2026.
The official exam voucher is on sale here, €505 excl. VAT. The exam is sat online, 24/7.
See the voucher
BITIL.COM is an ATO (Accredited Training Organization) and an AEO (Approved Examination Organization) of PeopleCert.
