GitHub with branch protection on main - Docker for local development - Terraform for infrastructure-as-code - GitHub Actions for CI/CD - No dedicated security tools (no SAST, DAST, or SCA in the pipeline)