|
By Renny Shen
Mobile application security testing finds flaws in your app and its SDKs before release. Learn MAST methods, iOS/Android risks, and tool criteria.
|
By Mrinalini Sugosh
AI can write your Terraform in seconds. Learn what it takes to govern configuration drift and heal AI-generated infrastructure builds.
|
By Abhinav Singh
AI agents are overloading source control and CI. See how 7x growth in PRs and builds at Harness shaped Agent-Ready SCM.
|
By Soujanya Namburi
Discover how php2shell vulnerabilities expose PHP servers to remote code execution and how Harness virtual patching protects endpoints while you deploy fixes. On October 21, 2026, the PHP project rushed out emergency patches for two critical flaws nicknamed php2shell (CVE-2026-109618 and CVE-2026-109619, both rated 9.2 out of 10). This isn't a bug in some plugin or a server someone set up wrong. It's in PHP itself, in the way the language has handled errors since 2012.
|
By Piyush Patel
Learn how Harness MCP OAuth proxy mode enables enterprise developers to use their own identity provider without static tokens or shared credentials. OAuth proxy mode lets enterprises run Harness MCP behind their own identity provider, with no static tokens anywhere in the chain. Coding agents write the change. Harness agents take it through production, running the builds, tests, scans, and deployments that follow, with policy enforced on every action.
|
By Ravi Yadalam
AI Budgets turns an AI cost policy into a limit customers can watch hold in real time, so overspend gets caught within days instead of surfacing on next month's invoice. With AI Budgets, the Cost Management Agent turns your AI cost policy from a document everyone signed once and forgot into a limit you can see working. In our last post, we showed why 73% of organizations have an AI cost policy, but only 13% can tell whether it's working.
|
By Uma Mukkara
VegaLoad is a free, open-source load testing tool for agentic developers. Your agent writes the test, runs it, and gives you a report. VegaLoad is a free, open-source load testing tool. You ask your agent for a test. It writes the file, runs it, and gives you a report.
|
By Ravi Yadalam
The problem: our AI spend was growing faster than our understanding of its ROI. Like most engineering organizations, Harness went from "a few people are trying out AI coding tools" to "AI tooling is a line item in the monthly finance review" in a matter of months. The cost itself wasn't really the problem.
|
By Shibam Dhar
AI writes code faster, but CI still repeats costly work. See how Harness CI cuts unnecessary tests, recompilation and dependency downloads. Six months ago, your team adopted an AI coding assistant. Pull requests doubled. Generated code started landing in branches faster than reviewers could read it. The CI pipeline kept up for about three weeks. Now the queue backs up by mid-morning. Builds take 38 minutes. 4,000 tests run on every commit when 60 are relevant.
|
By Eric Minick
The faster teams deploy, the more releases fail, and burnout climbs right with it. What 700 engineers told Harness about AI-scale delivery. Lenny's Newsletter put out its 2026 tech workforce survey this year, and you should read the whole thing. The headline stats: significant burnout jumped from 44.7% to 55.7% of tech workers in a year. Career optimism dropped from 54.8% to 48.7% over the same period of time.
|
By Harness
Was this the worst week in cybersecurity? AI-discovered PHP2Shell vulnerabilities, the LiteLLM supply chain attack, and reports of unauthorized AI agents accessing bank accounts are exposing serious weaknesses in software security. But is this really a cybersecurity problem, or has AI exposed decades of poor software engineering decisions? In this episode of ShipTalk, Martin Reynolds and Adam Arellano break down a remarkable week in AI security and debate whether engineering or security teams should be responsible for fixing what comes next.
|
By Harness
China’s AI and chip stocks have fallen sharply, raising a bigger question: could the same thing happen in the U.S.? With Microsoft, Alphabet, and Amazon reporting earnings, investors are looking for signs that cloud growth can justify the enormous sums being spent on AI. Is this a warning for the U.S. market, or can Big Tech’s AI investments deliver the growth investors expect?
|
By Harness
Microsoft is offering voluntary buyouts to 60,000 employees—more than a quarter of its workforce—while investing billions into AI infrastructure. But here's the bigger question: What happens when experienced engineers leave and AI-generated code keeps accelerating? AI can write code faster than ever. But deploying it safely, securely, and at scale? That's becoming the real bottleneck. Is Microsoft funding AI with headcount instead of efficiency?
|
By Harness
A hidden recording device. A former OpenAI engineer. And a possible connection to the Saudi government. What started as a suspicious discovery behind a television inside OpenAI has turned into a federal investigation with potential national security implications. The FBI is investigating whether former OpenAI engineer Abdulrahman Alfozan was involved in corporate espionage, with prosecutors pointing to alleged connections to a member of the Saudi royal family.
|
By Harness
Microsoft just released over 1,400 security patches, including three zero-day vulnerabilities, one of which is already being exploited. But is this a sign of better security or a much bigger problem? In this ShipTalk discussion, we break down Microsoft's massive Patch Tuesday release, the challenges of managing thousands of vulnerabilities across enterprise environments, and whether AI is helping Microsoft find problems too late in the software development process.
|
By Harness
AI is making code generation faster than ever. But writing code is only half the battle. Neil Watkins from Burns & McDonnell explains why the next big challenge in AI-driven software development isn't generating more code. It's making sure that code can be tested, secured, and deployed safely. As AI accelerates development, businesses need to rethink how they manage risk and ship software with confidence.
|
By Harness
What if we could eliminate vulnerabilities before they become a problem? Neil Watkins from Burns & McDonnell explains how AI, automated security assessments, and Harness CI/CD capabilities could transform vulnerability management. From reducing attack surfaces to rapidly responding to critical zero-day vulnerabilities, the future of security is about moving faster without slowing down developers.
|
By Harness
An OpenAI engineer was arrested after a hidden recording device was discovered inside an executive conference room. Who was he trying to record, and who was the information intended for? Martin Reynolds and Adam Arellano break down one of the strangest AI security stories of the year, along with three major cybersecurity headlines. Microsoft just released more than 1,400 security fixes in a record-breaking Patch Tuesday. Is AI finding vulnerabilities faster than companies can actually fix them?
|
By Harness
AI is writing code faster than ever. But what happens after the code is written? Harness CEO Jyoti Bansal introduces four AI agents built to automate the software delivery lifecycle: Software Delivery Agent – Automate builds, deployments, and infrastructure management. Security Testing Agent – Find, prioritize, and fix vulnerabilities with AI. Runtime Protection Agent – Protect applications, APIs, and AI agents in production.
|
By Harness
Control AI spending across your organization with Harness Cost Management Agent's AI User Budgets. In this demo, see how Harness helps teams set, monitor, and enforce AI spending limits across tools like Claude, Cursor, and Amazon Bedrock, all from one centralized control plane. What you'll learn: Set weekly AI spending budgets for users and teams Track AI consumption across multiple tools and models.
|
By Harness
AI for Development Isn't New. AI for Delivery Is! AI coding assistants have transformed how teams create software. But innovation only delivers business value when code moves quickly and safely from commit to production and into customers' hands. In AI-Native Software Delivery, Harness Field CTO Nick Durkin and DevOps veterans Eric Minick and Chinmay Gaikwad present a practical guide to applying AI across the entire software delivery lifecycle.
|
By Harness
Organizations everywhere are racing to modernize DevOps and elevate the developer experience, but how close are they to actually delivering?We surveyed over 650 engineering leaders to find out. The result is The State of Software Engineering Excellence 2025, a report that uncovers the hidden challenges, gaps, and opportunities shaping today's software teams.
|
By Harness
This comprehensive whitepaper shows you how modern software delivery platforms solve these challenges.
|
By Harness
Modern systems are more complex-and more fragile-than ever before. Whether it's scaling challenges, dependency failures, or unpredictable outages, reliability is no longer optional. It's a competitive edge. This eBook provides a practical blueprint for successfully adopting Chaos Engineering, with strategies proven to work across engineering, SRE, and QA teams. Learn how to overcome internal blockers, align ownership, and embed resilience testing directly into your software delivery lifecycle.
|
By Harness
You're adopting AI code generation tools to enhance your engineering team's output, but how do you quantify the real return on investment? Without precise measurement, you're navigating in the dark, unable to identify true productivity gains or pinpoint areas for optimization. Justifying these critical AI investments becomes difficult.
- October 2026 (52)
- September 2026 (35)
- August 2026 (34)
- July 2026 (35)
- June 2026 (22)
- May 2026 (38)
- April 2026 (54)
- March 2026 (44)
- February 2026 (29)
- January 2026 (20)
- December 2025 (24)
- November 2025 (27)
- October 2025 (21)
- September 2025 (18)
- February 2025 (1)
Harness delivers intelligent AI automation, so your team ships code faster, safer, and smarter.
Don't let your pipeline become the bottleneck as developers and AI coding agents generate more code. Harness AI intelligently automates, safeguards, and accelerates software delivery at any scale.
- AI for DevOps & Automation: Unleash developer productivity with AI that understands your DevOps ecosystem. Harness combines the industry's fastest, most secure CI/CD with developer self-service to automate pipelines, infrastructure, and the entire path from code to production.
- AI for Testing & Resilience: Release software confidently using AI-powered predictive analytics and testing. Make every change fast, safe, and resilient, so your teams can focus on shipping quality code instead of chasing bugs and triaging outages.
- AI for Security & Compliance: Make secure software your new default. From application and API discovery to AI-powered threat prevention, Harness uses contextual insights and agentic workflows to detect and mitigate risks from build to post-deployment.
AI for Everything After Code.