Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

ISO 27001, G-Cloud and SOC 2: How to vet a sovereign cloud provider

A procurement officer at a mid-sized financial services firm spent six months last year negotiating with a cloud provider that turned out not to hold the certification it had implied in its sales deck. The contract collapsed during legal review. The firm lost the time, the provider lost the deal, and somewhere in the middle, a senior engineer learned the difference between "compliant with the principles of" and "audited to the standard of.".

Get Ship Done: Everything We Shipped in April 2026 | Harness Blog

It’s becoming increasingly clear that AI-generated code can create real challenges once it reaches production. At Harness, we’ve been focused on innovating fast and solving those problems, so teams can move quickly without sacrificing reliability. In the past 30 days, we delivered 70+ new features.

Google Cloud Next '26 Recap: AI, Efficiency, and the Rise of Frictionless Delivery | Harness Blog

‍Summary: Google Cloud Next ’26 focused on the future of software delivery, emphasizing that AI, platform consolidation, and an urgent push toward efficiency are reshaping the Software Development Life Cycle (SDLC). The key takeaway from the event was that organizations are moving from AI experimentation to operationalization, actively consolidating fragmented tools onto end-to-end platforms that embed AI for control, intelligence, and speed. ‍

Your free credits are leading to a 30-person nightmare

Before I worked in tech, I worked in logistics. I saw a specific pattern repeat itself at office supply companies over and over, until I could see it coming before the customer did. The pattern went like this. A small office supply company would sell paper and pens to local businesses. One day a customer asked, "can you deliver a box of paper?" The salesperson said yes, drove the box over in their car after work, and thought nothing of it. The customer told their friend.

Shadow IT Is Back - And Vibe Coding Made It 10x Worse

AI coding tools are the new Shadow IT - but instead of rogue Trello boards, they have OAuth access to your code repos, cloud accounts, and production databases. Here's what's already gone wrong, and how platform engineering fixes it. Romaric founded Qovery to make Kubernetes accessible to every engineering team. He writes about platform strategy, developer experience, and the future of cloud infrastructure.

Test Data Management and SOC 2 Compliance | The Tony and Tonie show Ep43

SOC 2 compliance isn’t just about protecting data in your production systems. Your test data may also be exposing you to risk. Here’s how to get it under control. Using production data outside prod is one of the fastest ways to create compliance risk. Tony and Tonie discuss how a Test Data Management approach gives you the control, automation and traceability that SOC 2 demands, without slowing down development.

What happens when you delete everything? Three minutes, or thirty hours.

Last year, at the annual conference for an open source framework you've definitely heard of, I walked up to the founder in a room outside the main stage. He was hunched over his laptop, frantic. We've known each other for a few years. "What's going on? Is everything okay?" He looked up with the specific shade of white people only get when they realize they've made a big mistake.

DORA Metrics in the AI Era: Why Deployment Isn't Faster

DORA metrics in the AI era reveal a paradox: PR volume is climbing, but deployment frequency is staying flat. In this talk, GitKraken's Director of Product Jeff Schinella breaks down why AI-accelerated code generation is creating a review bottleneck that your DORA metrics can't fully explain on their own. Jeff walks through how PR metrics (cycle time, first response time, code churn, and PR size) serve as the leading indicators behind your DORA data. If your deployment frequency is flat while PR counts go up, the bottleneck isn't your devs. It's your review capacity.