Operations | Monitoring | ITSM | DevOps | Cloud

Storage and Story: JFrog Artifactory + Kosli, How to Prove Where Your Artifacts Came From

Your artifact repository tells you what software is stored — but can it tell you how it got there, and who approved it? In this video, Matt Bailey (Product Manager, Kosli) shows how JFrog Artifactory and Kosli work together to give you both storage and story. While Artifactory stores your binaries, Kosli automatically builds an immutable chain of custody — recording every commit, build, test, and deployment that led to your artifact in production.

Faster Approvals with ServiceNow + Kosli, How to Automate Compliance Evidence for Change Management

Are your deployments getting stuck waiting for approvals? If your code is ready but your ServiceNow change ticket isn’t — the bottleneck might not be people or process. It’s missing evidence. In this video, Matt Bailey (Product Manager, Kosli) shows how ServiceNow and Kosli work together to automate compliance evidence collection — turning manual approval bottlenecks into seamless, audit-ready change management.

What is Content Addressable Storage?

Imagine a world where every change in your systems from a config tweak to a deployment carries its own cryptographic proof. No forms. No meetings. Just mathematical truth. In this video, Mike Long (CEO & Co-Founder, Kosli) explains how cryptographic fingerprints like SHA-256 are used to create unique identities for files, code, and configurations — and how Kosli uses this approach to continuously track changes across servers, Kubernetes clusters, and cloud environments.

Secrets We Forgot... Until Automation Saved Us

We All Have That One Secret… That API key that has been sitting in production for ages. The personal access token that was supposed to be rotated 2 months ago. The service key that is about to expire… wait, when does it expire again? Most developers have experienced working with secrets. We create secrets, use them, and promise ourselves that we will rotate them. But somehow, the secret that was supposed to be rotated after 90 days is still standing strong after 6 months. Sounds familiar?

Mike Long and DORA Community Discussion - Software Delivery Governance

Manual governance in regulated industries is like steering a ship with last year’s map. Approvals, ticket queues, and after-the-fact evidence collection slow delivery and increase risk. By the time an audit arrives, teams are scrambling to prove they followed the process. Watch Kosli’s Mike join Nathen Harvey at DORA to unpack why this happens — and what continuous, automated governance can do to fix it.

Build. Release. Run. Repeat. But Where's the Control?

In every engineering organization, from fintech unicorns to 20,000-seat global bank, delivery happens in a loop. Code gets built. Releases get pushed. Systems run 24/7. Then it all happens again. This cycle isn’t an opinionated lifecycle dreamed up by a consultant or vendor, it’s just the reality of software delivery today.

Rewriting the Same Controls-Over and Over Again? How FINOS and Kosli Are Fixing Software Compliance

Every bank needs to prove it’s compliant. So why is every bank reinventing the same rules? Manual, duplicative compliance across teams Engineers stuck gathering screenshots for audits Custom rules for common risks Missed opportunity to define shared standards Mike joins FINOS Aaron Griswold and explains why Kosli joined FINOS—and how defining shared SDLC controls can help regulated organizations stop wasting time and start delivering software faster and safer. Unpacking the real problems in regulated software delivery.

Security and Compliance Takes Center Stage: Key Insights from Open Source Finance Forum - London 2025

We’ve just wrapped up London’s 2025 Open Source Finance Forum (OSFF) in London and in this blog I’ll try to capture the key highlights from this year’s event while they’re still fresh. Dominant themes were the increasing prominence of legislation and governance frameworks, and what these mean for developers and practitioners.

The Future of Auditing is Agentic AI

There is a huge amount of hype around AI. Companies are growing faster than ever, IT budgets are being redirected, and product roadmaps everywhere are being redrawn. There is no doubt LLM’s are a transformative technology. At the same time, as with any early technology cycle we are far from understanding the patterns of success. And for sure, mis-steps and bad takes abound.

Introducing Environment Policy- Gain Unified Control Over Compliance Requirements Across Your Runtime Environments

In modern software development, different environments often have different compliance requirements. Your development environment might allow more flexibility, while production demands strict controls around security scans, testing, and code review. Environment Policy helps you codify these requirements and enforce them consistently.