Application containers have emerged as one of the key technologies for modern day app development. As companies embraces cloud-native stack, the devops lifecycle encompasses a myriad of novel challenges that introduces newer security concerns, vulnerabilities of various kinds, bugs, inadequate authentication and authorization, misconfiguration that needs remediation at the earliest possible time before the code reaches production. Security breaches can mean hefty fines, loss of customers’ trust, millions of dollars in lost revenue, and lost time and money spent to urgently patch the security hole. Merely providing developers with a long list of detected vulnerabilities is not adequate for fixing issues inside containers. The talk aims to highlight the key challenges and risks with Container security in application development and modernisation phase and how they can be mitigated with some of the industry best practises and cloud-native security tools. In the end , a demo will be presented to show case the open-source tools (Docker-Bench, Kube-Bench, Trivy, Clair, etc.) that can be build in the DevSecOps practises for identifying vulnerabilities, decrease attack surface and help run applications safe & secure.