Gemba translates to ‘the real place’ in Japanese. Detectives refer to the crime scene as gemba, TV reporters report from gemba. So what does DevSecOps and I am the Calvary have in common with Gemba? In this talk, I will demonstrate that three different concepts are all arriving at the same destination and what that may indicate for security engineering practices.