“I think in order to ensure that security is cohesively blended into DevOps, pen testing should be performed on an ongoing basis to keep up with it.”

Transcript evidence from James Ransome and Brook Schoenfield -- trust and verify: Building in Security at Agile Speed.