Security should be part of the conversation when selecting a Devops company
https://apprecode.com/. Infrastructure-as-code, access controls, automated testing, and continuous monitoring can all contribute to a more controlled development environment.