Operations | Monitoring | ITSM | DevOps | Cloud

We Rebuilt Harness for Agents: Introducing a New Platform Experience

Hundreds of millions of deployments taught us what delivery takes. The new platform experience applies it to a world where agents do the work. A year ago, the question was whether agents could write code. That question is settled. The new question is whether they can ship it. Building an agent is easy. Running one inside a real delivery process is not. Real work runs through pipelines, approvals, data, and quality gates. Delivery has always been designed around the people doing the work.

GitHub's AI Coding Boom Exposes a Bigger Security Problem

GitHub's AI coding boom is exposing a major problem in software security. As AI coding agents generate more code and developers push commits faster than ever, can traditional DevSecOps and shift-left security practices keep up? In this episode of ShipTalk, cybersecurity leader Jake Bernardes breaks down GitHub Universe's AI coding trends and argues that shift-left security is dead in the age of AI-generated code.

What Is the Harness Software Delivery Agent? | AI-Powered CI/CD Explained

What is the Harness Software Delivery Agent? Harness Software Delivery Agent is an AI-powered software delivery solution that helps teams automate CI/CD pipelines, infrastructure workflows, deployments, and troubleshooting, moving code from commit to production while enforcing existing policies and approvals. In this video, we explain how Harness Software Delivery Agent works and how it helps DevOps teams, platform engineers, and developers automate software delivery.

AI Agent Security: Applying the OWASP Top 10 Across the Software Development Lifecycle

Learn how to secure AI agents across development, testing, deployment, and runtime using the OWASP Top 10 for Agentic Applications. A single poisoned web page can be enough to hijack an AI agent. As organizations move from AI assistants that generate responses to autonomous agents that take action, the security risks are changing. An agent can access sensitive data, execute code, modify configurations, and interact with external systems.

Q3 FY27 Product Update: Harness Pipeline

Discover the latest features, enhancements, and updates in the Q3 FY27 product update for Harness Pipeline Q3 FY27 gives you more control over how pipelines run, with project-level concurrency partitions, pipeline identities, and a customizable run form. Policy as Code also expands: you can run policy sets on your own infrastructure and preview a change with Blast Radius Analysis before you save it.

Google's Stock Drop Reveals What AI Is Missing

Google just reported $51.4 billion in quarterly capital spending. Anthropic has filed for an IPO. And GitHub's AI coding explosion is raising serious questions about software security. Is the AI boom creating real business value, or are we heading toward an AI bubble correction? In this episode of ShipTalk, Adam Arellano and Martin Reynolds are joined by cybersecurity expert Jake Bernardes, CSO at Gambit, to break down three major developments reshaping artificial intelligence, software development, and cybersecurity.

Unified API Inventory reduces the time to patch with cross-source correlation

Cross-source API correlation connects runtime findings to their code, documentation, and fixes for improved defense against machine-speed attacks. It's late on a Thursday, and a runtime alert fires on POST /api/v2/payments in production. The finding is clear. What happens next is not. In fact, it creates a host of questions to be answered: Every AppSec team knows this hunt. And every day spent hunting for the right repo and owner is a day the attacker can still exploit a vulnerability.

Get Ship Done: Everything We Shipped in October 2026

Harness October 2026 Updates: 150+ Features, Cosmos, FedRAMP 20x This Month's Biggest Ships: The shipping velocity at Harness skyrocketed. Harness shipped 150+ features in October, one about every 5 hours across 31 days! October's list covers both ends: code creation and software delivery. The biggest ship is Cosmos, a new agent that takes engineering work from ticket to pull request. The rest carries that pull request to production and keeps it safe.

The Binance Breach Wasn't a Crypto Failure: It Was a Trust Failure

Explore how the $6.36B Binance breach exposed critical gaps in identity, DevOps, and signing security - and what engineering teams can learn from it. The October 29, 2026 theft from Binance is best read as a failure of identity and release-path trust, not a failure of cryptography. Binance's early findings point to a compromised DevOps engineer's laptop that gave an attacker a route into a service container and the ability to submit unauthorized withdrawals.