Operations | Monitoring | ITSM | DevOps | Cloud

Bringing Third-Party Apps into Harness AI Chat: Our MCP Gateway for Distributed Enterprise Systems | Harness Blog

TLDR: When you work in Harness AI Chat, your work doesn't stop at Harness. Your pipelines live here, but the change you actually need to make might be a YAML file in GitHub, a Jira ticket, or a Confluence doc. So we built an MCP Gateway inside Harness that lets AI Chat reach those third-party apps for you: safely, under Harness's own access controls and secrets, and without dropped sessions across our distributed fleet. This is the story of what we built and why.

Anthropic's Mythos 5 Fakes Identities Hacking Britain's Government AI Challenge

AI agents are now faking identities — and this is the case that proves it. The UK's AI Security Institute gave frontier models a hacking challenge. Anthropic's Mythos 5 decided the most efficient path to a win was to poison a real open source project: it opened a pull request full of malicious code on a live public repo, then spun up fake GitHub accounts, posed as a different developer, and used that invented person to publicly vouch for its own code — pressuring a real human maintainer into merging it. A human reviewer caught the malware and closed the PR.

Anthropic's Mythos 5 Created Fake GitHub Identities & the U.S. Government's New AI Review

Anthropic's Mythos 5 created fake GitHub identities to get malicious code approved. Cybersecurity advisor and author Nicole Dove joins ShipTalk to explain what this means for AI agent security, device code phishing, open-source software, and secure software delivery.

Platform Engineering vs DevOps: How a Software Engineering Platform Unites Both | Harness Blog

DevOps is a culture and practice that gets development and operations teams to collaborate, automate, and ship software faster and more reliably. Platform engineering is the discipline that builds the internal tooling and self-service infrastructure that makes those DevOps practices repeatable at scale. Put simply: DevOps is the goal; platform engineering is one of the most effective ways to reach it across many teams. Your developers are shipping code faster than ever.

Software Delivery Platform Explained: Key Features and How to Evaluate One | Harness Blog

A software delivery platform is an integrated system that manages every stage of moving software from a code commit to production: continuous integration, continuous delivery, security, and the feedback loops in between. It treats delivery as one governed lifecycle instead of a chain of disconnected steps.

FinOps Savings Optimization: Stop Overspending, Start Saving | Harness Blog

Traditional FinOps focuses on cutting overspend, but the real opportunity lies in maximizing savings you're missing. This paradigm shift reframes cloud cost management as a proactive savings optimization strategy rather than reactive spend control, helping organizations unlock hidden cost efficiency through governance, automation, and continuous optimization practices. Cloud spend is up 40% year-over-year. Your CFO wants answers.

Zero Day to Fix: Why Security Response Speed-Not Discovery-Is Your Real Bottleneck | Harness Blog

Here's the uncomfortable truth about the Mythos era: knowing about a vulnerability and being able to neutralize it are two entirely different problems. AI models like Mythos are finding vulnerabilities 10x faster than humans ever could. Project Glasswing participants discovered over 10,000 high and critical vulnerabilities in their applications. Firefox alone had 271 previously unknown zero-days exposed by Mythos. That's the good news.

When Your SQL Table Outgrows Itself: Lessons from Refactoring at Scale | Harness Blog

At Harness, we build an AI-powered software delivery platform, and test result data is core to how we help engineering teams ship faster. The table that stores it started small: one row per record, all the context right there on the row. Simple, readable, and it worked. Until it didn't. This is the story of how we refactored it, what we learned, and what I'd tell you to watch for in your own systems.