Infrastructure as Code, Security Blind Spots, and the Messy Reality of DevOps
I’ve spent most of my career in infrastructure and reliability engineering, from years as an SRE at Google to leading teams at Facebook and now building Spacelift. Along the way, I’ve watched entire paradigms rise and fall, seen technologies mature, and learned some hard lessons about where DevOps and security meet—and where they clash. The […]
Survey Surfaces Lots of Room for Software Engineering Improvement
A survey of 600 software engineers and 600 senior technology leaders across the United States, United Kingdom, Germany, and France finds that nearly three quarters of software engineers say demands on their time make it difficult for them to build new features. Conducted by Chainguard, a provider of repositories for accessing secure container images, the […]
Report: Full-Stack Observability Cuts Downtime Costs
The numbers are sobering, at best. A new global survey from New Relic pegs the median cost of a high-impact IT outage at $2 million per hour (that’s roughly $33,333 a minute) with a median annual hit of $76 million. That’s not just a bad week; it’s a major operational risk. And it’s landing just […]
ControlMonkey Adds AI Agents to Infrastructure Automation Platform
ControlMonkey today added artificial intelligence (AI) agents to its infrastructure automation platform that promise to make it simpler for almost any developer to securely provision infrastructure as code (IaC). Company CEO Aharon Twizer said this KoMo AI extension to the ControlMonkey platform will eliminate a skills gap that often conspires to slow the pace at […]
Harness CEO Calls for Reimagining of CI/CD Workflows in the AI Era
Harness CEO Jyoti Bansal at an Unscripted 2025 event in New York today told attendees the time has come to reimagine how continuous integration/continuous delivery (CI/CD) platforms function in the age of artificial intelligence (AI). Rather than simply failing a build it’s now possible for the CI/CD platform to automatically fix issues that previously required […]
Honeycomb Adds Ability to Orchestrate Multiple AI Agents to Observability Platform
Honeycomb has added a Canvas framework for managing and orchestrating multiple artificial intelligence (AI) agents as they observe and query massive amounts of telemetry data. Morgante Pell, technical lead manager for engineering at Honeycomb, said Canvas is the latest extension to a series of Honeycomb Intelligence initiatives that, for example, provide access to an AI […]
Pulumi Previews AI Agents Trained to Automate Infrastructure Management
Pulumi today revealed it is now making available in preview a set of artificial intelligence (AI) agents to its namesake infrastructure-as-code (IaC) platform that are capable of diagnosing issues and autonomously completing tasks when permitted. Company CEO Joe Duffy said Pulumi Neo adds a set of AI agents specifically trained to automate the management of […]
Oasis Security Identifies Security Weakness in Cursor AI Coding Tool
Oasis Security this week warned application developers of a security flaw in the Cursor artificial intelligence (AI) code editor developed by Anysphere, Inc. that potentially could be used to allow a maliciously crafted code repository to execute code as soon as it’s opened using Cursor. Erez Schwartz, threat research engineer at Oasis Security, said that […]
JFrog CEO: AI Agents Require Practices Beyond Security, Traceability
NAPA, Calif. — A new persona in software development, artificial intelligence (AI) agents rather than human developers, has made it imperative that foundational platforms incorporate agentic practices alongside security, traceability, and visibility to succeed in the AI era. “Every foundational platform requires a single system of record,” Ben Haim told the crowd. “If you don’t […]
Broadcom Adds Argo and Ubuntu Support to VMware Cloud Foundation
Broadcom today at the VMware Explore 2025 conference unfurled a set of developer services for the instance of Kubernetes it has embedded into its VMware Cloud Foundation (VCF) platform that includes the Argo continuous delivery (CD) platform. At the same time, Broadcom expanded its alliance with Canonical to include enterprise-grade support for instances of VCF […]
John Willis: The True North of DevOps and DevSecOps
Over the last 14-plus years of my journey through DevOps, I’ve had the good fortune to meet some of the smartest, most generous, most forward-thinking people in our industry. It’s one of the things I’m most thankful for—the friendships and shared learning that come from being part of a community that is always pushing boundaries. […]
Tackling the DevSecOps Gap in Software Understanding
When I first read the recent article from CISA titled “Tackling the National Gap in Software Understanding,” I had the same reaction I imagine many of you did: Well, of course this is necessary. Who in their right mind doesn’t want better visibility into the software used in our most mission-critical systems? But then I […]
AppSignal Adds OpenTelemetry Support to Monitoring Platform
AppSignal has extended its application performance monitoring platform to provide native support for OpenTelemetry, an open source framework for instrumenting applications that is being advanced under the auspices of the Cloud Native Computing Foundation (CNCF). Wes Oudshoorn, chief product officer for AppSignal, said the implementation of OpenTelemetry is designed to enable DevOps teams with a […]
The Right Kind of AI for Infrastructure as Code
AI is everywhere in cloud security right now. Nearly every product claims to be “AI-powered,” and copilots and chatbots promise to help teams interpret issues faster. But for most platform teams, understanding the problem isn’t the hard part. The real challenge is resolution. Cloud environments change quickly, and the backlog of security findings grows just […]
Survey Surfaces Multiple Mobile Application Release Management Headaches
A survey of 300 mobile engineers in the U.S and the United Kingdom (UK) working for organizations with 500 to 10,000 employees finds, on average, respondents are spending five hours per release on low-value tasks involving manual steps, coordination issues and approval bottlenecks, translating into 130 wasted engineering hours annually per developer. Published by Runway, […]
Why Continuous Integration Matters More Than Ever
Continuous Integration is now essential to modern DevOps, automating testing and deployment to deliver faster, higher-quality software with less risk and stronger team collaboration.
CI/CD Pipelines for Large Teams: How to Keep Velocity Without Breaking the Build
Continuous integration (CI) and continuous delivery (CD) are essential for modern software teams, as there is now a need for fast feature delivery and high-velocity improvements. However, achieving high speed may be difficult without compromising reliability, as the process involves coordinating among development teams working on different features of the same application simultaneously, product complexity […]
Survey Sees Argo CD Starting to Gain Significant Traction
A survey of 185 software development professionals who have adopted the Argo continuous delivery (CD) platform finds that 97% are now using it in production environments, with 60% running Argo for more than two years.
Veracode Allies with Wiz to Bring More Context to DevSecOps Workflows
Veracode today revealed an alliance through which it will integrate its application security posture management (ASPM) platform with the cloud native application protection platform from Wiz.
Centreon Extends Monitoring Reach into Observability Realm
Centreon this week generally made available an open source agent for monitoring IT and operational technology (OT) environments that incorporates the open source OpenTelemetry agent for instrumenting applications that is being advanced under the auspices of the Cloud Native Computing Foundation (CNCF). Raphaël Chauvel, chief product officer at Centreon, said now that the Centreon Monitoring […]
Why Your Deployments Fail: A Deep Dive Into Misconfigured Pipelines
Even for experienced DevOps engineers, pipelined deployments can fail in surprising ways when a detail is misconfigured.
Accelerating Telecom Application Modernization With AI and DevOps
Telecom organizations that approach modernization with a pragmatic, tech-forward mindset can expect to reduce operational overheads.
Kusari Adds AI Security Tool to Inspect Code as Pull Requests Are Made
Kusari has added an artificial intelligence (AI) tool that runs a security risk assessment every time an application developer makes a pull request. Company CTO Mike Lieberman said Kusari Inspector is designed to make it simpler for security to be shifted left toward application developers in a way that doesn’t impinge productivity. Most application developers […]