Why Responsible AI Isn’t Optional in DevOps – It’s the Next Frontier of Ownership
As AI takes on decision-making roles inside CI/CD pipelines, DevOps teams face a new challenge: Accountability. This article explores why responsible AI governance is now a core DevOps responsibility and a leadership imperative.
Software Supply Chain Threats Are on the OWASP Top Ten—Yet Nothing Will Change Unless We Do
Software supply chain security is steadily moving to the forefront of cybersecurity conversations. In the past, it has been overshadowed by a focus on malware outbreaks, ransomware, endpoint protection, and application vulnerabilities. That changed this month, when OWASP elevated software supply chain failures to third place on its 2025 Top 10 list. The OWASP Top […]
Apiiro Guardian Agent Prevents AI Models From Generating Insecure Code
Apiiro launches Guardian Agent, an AI security agent that rewrites prompts in real time to prevent insecure code from ever being generated, reducing vulnerabilities without slowing developers.
Anthropic Adds Automated Security Reviews to Claude Code
Anthropic pulls security into the inner dev loop with new Claude Code tools that scan for vulnerabilities in the terminal and on every pull request—before insecure code ever ships.
The Four Knobs of AI Agent Reliability: A DevOps Perspective
AI agents aren’t chatbots—they’re systems that act. This guide cuts through the hype to show how DevOps teams can configure, trust, and run AI agents reliably in production.
Codenotary’s Free SBOM Service Tackles the AI Software Supply Chain
Just because AI is writing your code doesn’t mean you can stop worrying about software bills of materials. While the quality of AI coding remains open to debate, there’s no question that everyone and their dog is using it. That means, if you’re serious about using AI in production, you must track its code in […]
Five Great DevOps Job Opportunities
This week, DevOps.com spotlights open roles at NVIDIA, Travelers, Tessera Labs, Sherwin-Williams, and ThinKom Solutions to help engineers advance their careers.
Futurum Group Survey Sees Increasing Investments in AI to Deliver Software
A global survey of 628 enterprise IT leaders conducted by the Futurum Group finds that increasing investment in generative artificial intelligence (AI) (40%), followed closely by AI and machine learning (ML) technologies (39%) and applying AI to IT operations (37%), also known as AIOps, are expected to be the top three drivers for accelerating software […]
N. Korea Contagious Interview Campaign Turns to VS Code to Deliver Backdoor
Jamf security researchers said state-sponsored espionage actors are using malicious VS Code projects to steal information.
Legit Security AI Tool Uses Threat Feed to Identify Risks to Software Supply Chain
Legit Security this week added a threat feed that DevSecOps teams can use to instantly determine if a newly discovered vulnerability impacts their software supply chain. Built using the Legit VibeGuard tool, the threat feed added to the company’s application security posture management (ASPM) platform also enables DevSecOps teams to take advantage of “vibecoding” techniques […]
DevOps: The Never-Ending Story
A reflective take from Alan on why DevOps endures, adapts, and remains a human-centered practice in an era of platforms and AI.
Stop Worshipping ‘Global Availability’: A Practical SLI/SLO Bucketing Playbook
Global availability hides real failures. Learn why bucketed SLIs give a truer picture of reliability—and how SRE teams can align alerts with real business impact.
AWS Sage: Your AI Assistant’s Gateway to the Cloud
AWS Sage is an open-source MCP server that gives AI assistants unified, intelligent access to AWS with cross-service discovery, dependency mapping, impact analysis, and automated incident investigation.
Autoptic Unfurls AI Change Resilience Agents to Analyze Telemetry Data
Autoptic launches AI-powered change resilience agents that analyze DevOps telemetry to detect root causes, prevent incidents, and boost confidence before production changes.
Testlio Adds AI Tool to Generate Dashboards on App Testing Service
Testlio enhances its testing platform with AI-generated dashboards that correlate over 100 signals, helping DevOps and business leaders spot quality, risk, and AI-related issues faster.
Harness Adds AI Agent to Help Investigate Incidents
Harness today added an artificial intelligence (AI) agent to its portfolio that has been specifically trained to help DevOps teams investigate events that occurred prior to an incident. Tina Huang, vice president of product and engineering for AI SRE at Harness, said the Harness Human-Aware Change Agent leverages large language models (LLMs) to analyze comments […]
Resilient Middleware at Scale: Using YAML and Ansible to Harden Apache, WebLogic and Tomcat
Transform your middleware into a resilient powerhouse with automation, consistent configuration, and progressive delivery. Discover how to reduce downtime and increase stability across Apache, Tomcat, WLS, and more.
DevOps Didn’t Fail — We Just Finally Gave it the Tools it Deserved
Charity Majors delivers a wake-up jab to DevOps, sparking debate on its evolution and success. Is it a failure or just getting interesting? Alan dives into the discussion.
Five Great DevOps Job Opportunities
Discover top DevOps job opportunities this week from JP Morgan Chase, SpaceX, BBR Partners, Fox Corp, and Veeva Systems, designed to help professionals advance their careers.
Meet the 2025 DevOps Dozen Award Winners
When we first launched DevOps.com, the goal was never just to report on tools or trends. It was to elevate the people, ideas, and communities shaping how software is built and delivered. The DevOps Dozen Awards exist for that exact reason. Each year, these awards recognize individuals, teams, technologies, and community efforts that move DevOps […]
Establishing DevOps for Mainframe Applications
Mainframes don’t have to block DevOps. Learn how extending CI/CD, Git, and security scanning to mainframe applications modernizes delivery without replacing mission-critical systems.
FinOps Meets DevOps: Engineering Cost Ownership in 2026
In 2026, cloud cost overruns stop being finance’s problem and become an engineering responsibility. Here’s how treating cost as code finally makes FinOps work.
GitLab Delivers on AI Agents Promise to Automate DevOps Workflows
GitLab today made generally available an agentic artificial intelligence (AI) platform that automates software engineering tasks ranging from planning to application security. Coinciding with the release of version 18.8 of the core GitLab platform, the GitLab Duo Agent Platform initially provides access to seven AI agents that DevOps teams can assign a range of tasks […]