Modern software delivery pipelines can deploy code dozens or even hundreds of times per day. Traditional penetration testing models, where security teams perform assessments quarterly or before major releases, simply cannot keep pace. Attackers do not wait for the next security review.
Source: [Dev.to](https://dev.to/varunvarde/how-do-you-integrate-penetration-testing-into-cicd-1795)