The rise of containerized environments and microservices architectures has revolutionized application development, offering scalability and efficiency. This shift also introduces significant security challenges, including vulnerabilities in container images, inter-service communication risks, and misconfigurations in orchestration platforms. The SecCO-OC project addresses these challenges by embedding security workflows into the CI/CD pipeline, a critical component of the DevOps paradigm. These workflows include static and dynamic threat analysis, runtime enforcement of security policies, and secure container publication. Stack4Things, a distributed platform for IoT resource management, serves as a foundational testbed for SecCO-OC. Its modular and containerized architecture provides a realistic environment for refining these workflows. Key innovations in SecCO-OC include advancements in containerization, such as enhanced virtualization techniques and hardware pass-through, ensuring robust security guarantees. The project also introduces security services directly within containers, achieving a balance between flexibility, functionality, and security. This paper explores how SecCO-OC’s strategies, developed by using Stack4Things, align with modern security standards and enhance the security maturity of containerized microservices while maintaining agility and scalability.