r/devsecops rules, stats, and what to post

A source-backed Rankhog guide to r/devsecops: public rules, community context, posting fit, and startup-promotion risk before you publish.

Members: 23,141
Community age: Created Nov 2016, 9 years
To post: No minimum in the rules
To comment: No minimum in the rules
Self-promotion: Allowed with conditionsCommercial advertisement is discouraged to keep engagement high.
Links: Not mentioned in the rules
Promo risk: HighFrom the rules, not from removal counts

Checked November 7, 2026 from the community's public Reddit pages:

Best hours to post in r/devsecops

No pattern yet. r/devsecops does not have enough top posts from the last 90 days to name its best hours.

Check r/devsecops with the best time tool

Subreddits like r/devsecops

Subreddits like r/devsecops are r/sysadmin, r/DataHoarder, r/selfhosted, r/devops, r/AZURE, r/webhosting, r/SQLServer and r/Hosting.

r/devsecops alternatives compared: members, karma to post and self-promo rules.
Subreddit	Members	Karma to post	Self-promo
r/sysadmin	1.3M	None listed	Limited
r/DataHoarder	1M	None listed	Banned
r/selfhosted	858.5K	None listed	Limited
r/devops	519.6K	None listed	Banned
r/AZURE	217.3K	None listed	Banned
r/webhosting	130K	None listed	Banned
r/SQLServer	67,872	None listed	Limited
r/Hosting	33,986	None listed	Banned

Find more rooms with the subreddit finder

Check a post for r/devsecops

By Anthony Riera, founder and operator of Rankhog.

Subreddit guides combine public Reddit source URLs, captured rules, visible verification dates, and Rankhog's account-safety workflow.

Rule summary

Commercial advertisement is discouraged.: We want to keep engagement high and do not want this subreddit to turn into mostly advertising.
Posts with low engagement may be removed.: We want to keep the content and engagement of this subreddit high. Low engagement suggests the community was not interested in the content. Low engagement posts may be removed at the discretion of mods to keep engagement high.

Works well

A writeup of a security mistake in your build pipeline and what it cost you, written as a lesson for other practitioners
A specific question about a real problem, like how other teams handle secrets scanning in continuous integration, phrased so people can share their own approach
A comparison post about two open approaches to supply chain security, based on what you actually tried, with no product attached
A postmortem of an incident or close call, with the timeline and the fix, because practitioners respond to honest detail
A plain text post asking how the community structures security reviews, where you reply to every comment and keep the discussion alive

Avoid

Posting a link to your product page or pricing page with a short intro, because that reads as commercial advertisement and the description says this is not a place to sell something
Writing a post that is really an ad wearing a story costume, where the first comment asks people to try your tool, because the mods remove commercial advertisements
Dropping a launch announcement and leaving, since posts that get no comments may be removed under the low engagement rule
Reposting the same promotional content across many subreddits, which shows up fast in a practitioner community like this one
Asking a fake question about your own product to start a conversation, because the community description makes clear they are wary of selling
Ignoring the engagement rule and posting filler content, since low engagement posts may be removed at the discretion of mods

What r/devsecops Is For

This is a community for DevSecOps practitioners, which means the people who build security into the way software gets shipped. Think engineers, security folks, and platform teams who deal with things like pipelines, scanning, and secure deployments. The public description sets the tone in one line, it is not a place to try and sell something. So the room is working people talking shop, not shoppers looking for tools.

Rules That Matter Before Posting

Two rules decide everything here. The first is “Commercial advertisement is discouraged.”, which says the mods want to keep engagement high and do not want the subreddit to turn into mostly advertising. The second is “Posts with low engagement may be removed.”, which says low engagement suggests the community was not interested, and low engagement posts may be removed at the discretion of mods. Together they mean a post has to be both non commercial and interesting enough that real practitioners respond to it.

What To Post

Post things practitioners want to talk about. Share a real lesson from securing a pipeline, ask a specific question about a problem you actually hit, or walk through how your team handles something like dependency scanning or secrets management. If you built a tool, you can talk about the underlying problem and what you learned, but the post should stand on its own as useful reading with no purchase required. Write it so people have something to respond to, because engagement is literally part of the survival test here.

What To Avoid

The obvious one is commercial advertisement, and the description doubles down on it by saying this is not a place to try and sell something. So a post that is really a pitch, a launch, or a link to your product with a thin wrapper is at risk. The quieter risk is the low engagement rule. If your post sits there with no comments, the mods may remove it at their discretion to keep engagement high. That means even a well meaning post can disappear if it does not spark conversation.

Use Rankhog before posting in r/devsecops

Want the version that does not run out? Subscribers get unlimited tool runs and more careful checks before posting.

Get my free Reddit SEO audit

Start your 7-day free trial. Card required. $99/month after trial. Next, connect a verified Reddit account; no strategy starts until you explicitly start Rankhog.

Reddit shadowban checker

Check whether a Reddit account is shadowbanned or suspended, or whether one post or comment was removed and by whom.

Reddit warm-up plan calculator

Enter an account's karma and age to get Rankhog's real warm-up plan: how many days, and what to do each day.

Reddit post checker

A free AI moderator simulation that checks your draft against published subreddit rules and six Reddit-native removal risks before you post.

Reddit account analyzer

Look up any Reddit user's post karma, comment karma and account age, and see how many subreddit posting rules the account clears.

Subreddit stats checker

Look up a subreddit's members, weekly visitors, age, growth and the karma and account age it asks of new posters.

Best time to post on Reddit

See when a subreddit's top posts actually went up, hour by hour across the week, with the three best hours on your own clock.

Reddit cake day checker

Find any Reddit account's cake day, its exact age, and when it becomes old enough for the subreddits it wants to post in.

Subreddit finder

Type a subreddit or a topic and I'll show you up to 12 subreddits from our guides. Each row has the member count, the karma and account age to post, and whether self-promo is allowed.

Common questions about r/devsecops

What subreddits are similar to r/devsecops?

Subreddits like r/devsecops are r/sysadmin, r/DataHoarder, r/selfhosted, r/devops, r/AZURE, r/webhosting, r/SQLServer and r/Hosting.

Can I post about my product at all?

The rules say commercial advertisement is discouraged and the description says this is not a place to sell something, so a straight promo post is the one clear way to get removed.

Are links allowed?

The rules do not say links are banned, but the brief marks link policy as unknown, so the safe move is to lead with text and substance and only link when it genuinely helps.

Can I mention that I built a tool?

Yes, if you come as a practitioner sharing real experience and you answer every reply, and you skip the pitch, because the rules target advertising and low engagement, not founders.

How long should I wait before posting again?

The rules do not set a waiting period, but the low engagement rule means a post can be removed after the fact if nobody engages, so plan to stay active in your thread.

Is AI written content banned?

The rules do not name AI content, so there is no stated ban, but generic filler will die under the engagement rule anyway, so write from real experience.