Operations | Monitoring | ITSM | DevOps | Cloud

We Rebuilt Harness for Agents: Introducing a New Platform Experience

Hundreds of millions of deployments taught us what delivery takes. The new platform experience applies it to a world where agents do the work. A year ago, the question was whether agents could write code. That question is settled. The new question is whether they can ship it. Building an agent is easy. Running one inside a real delivery process is not. Real work runs through pipelines, approvals, data, and quality gates. Delivery has always been designed around the people doing the work.

Q3 FY27 Product Update: Harness Pipeline

Discover the latest features, enhancements, and updates in the Q3 FY27 product update for Harness Pipeline Q3 FY27 gives you more control over how pipelines run, with project-level concurrency partitions, pipeline identities, and a customizable run form. Policy as Code also expands: you can run policy sets on your own infrastructure and preview a change with Blast Radius Analysis before you save it.

AI Agent Security: Applying the OWASP Top 10 Across the Software Development Lifecycle

Learn how to secure AI agents across development, testing, deployment, and runtime using the OWASP Top 10 for Agentic Applications. A single poisoned web page can be enough to hijack an AI agent. As organizations move from AI assistants that generate responses to autonomous agents that take action, the security risks are changing. An agent can access sensitive data, execute code, modify configurations, and interact with external systems.

Unified API Inventory reduces the time to patch with cross-source correlation

Cross-source API correlation connects runtime findings to their code, documentation, and fixes for improved defense against machine-speed attacks. It's late on a Thursday, and a runtime alert fires on POST /api/v2/payments in production. The finding is clear. What happens next is not. In fact, it creates a host of questions to be answered: Every AppSec team knows this hunt. And every day spent hunting for the right repo and owner is a day the attacker can still exploit a vulnerability.

Get Ship Done: Everything We Shipped in October 2026

Harness October 2026 Updates: 150+ Features, Cosmos, FedRAMP 20x This Month's Biggest Ships: The shipping velocity at Harness skyrocketed. Harness shipped 150+ features in October, one about every 5 hours across 31 days! October's list covers both ends: code creation and software delivery. The biggest ship is Cosmos, a new agent that takes engineering work from ticket to pull request. The rest carries that pull request to production and keeps it safe.

The Binance Breach Wasn't a Crypto Failure: It Was a Trust Failure

Explore how the $6.36B Binance breach exposed critical gaps in identity, DevOps, and signing security - and what engineering teams can learn from it. The October 29, 2026 theft from Binance is best read as a failure of identity and release-path trust, not a failure of cryptography. Binance's early findings point to a compromised DevOps engineer's laptop that gave an attacker a route into a service container and the ability to submit unauthorized withdrawals.

Announcing SOC 1, FedRAMP 20x Class A, PCI, and HIPAA Milestones At Harness

Explore Harness' latest compliance milestones: SOC 1, FedRAMP 20x Class A, PCI DSS, and HIPAA assessments across its platform and runtime security. Harness announced four compliance milestones: its first SOC 1 audit, FedRAMP 20x Class A certification, and first PCI DSS and HIPAA Security Rule assessments. SOC 1 and FedRAMP 20x Class A apply to the Harness Autonomous SDLC Platform. PCI DSS and HIPAA apply to the Runtime Protection Agent.