Operations | Monitoring | ITSM | DevOps | Cloud

What Is a Citizen Developer, and Why IT Teams Need Them Now

"Citizen developer" sounds simple: give business teams low-code tools and let them solve their own process problems. In practice, many organizations discover that the tools are still too technical for the intended builders or too loosely governed for IT to trust. Both problems matter. A policy cannot create citizen developers if the tool still demands platform expertise. An approachable builder cannot scale safely if workflows operate outside permissions, testing, audit, and lifecycle controls.

Getting started with the CircleCI CLI

The CircleCI CLI brings CI into your terminal, where developers and coding agents can work with it directly. You can set up projects, trigger and monitor pipelines, investigate failures, retrieve test results and artifacts, manage project settings, and more. Agents can use the CLI through shell commands or its built-in MCP server, giving them the tools and context to validate changes, diagnose failures, and try again without switching to a browser.

How to run fewer tests and speed up CI with CircleCI Smarter Testing

A one-line fix shouldn’t wait on the whole test suite. Yet a typical CI pipeline runs every test on every push, and a single flaky failure sends developers back to the rerun button. CircleCI’s Smarter Testing addresses both problems. Test impact analysis tracks which source files each test executes, then runs only the tests affected by a code change. Auto rerun retries flaky tests inside the job instead of failing the build.

How to Secure Your PHP Infrastructure and Remediate PHP2Shell with Puppet

The detailed flaw coined “php2shell” is inherent in the PHP language itself, with multiple versions of PHP affected that have been released on the last decade. Ryan Austin, a Calif researcher who helped uncover the issue told the BBC it was, “The most serious vulnerability I’ve ever found". Wiz wrote in a blog post about the detailed findings that would allow hackers to exploit the PHP2Shell issue and take control of an affected web server.

Introducing Ergo: explainable policies on OPA

When an auditor tests a control, they ask two questions about each change: was the control met, and what evidence shows how that result was reached? Most automated controls can answer the first. A Rego policy returns allow: true or allow: false, but says nothing about what it checked. Engineers can hand-write violation messages to explain a failure, but a passing check leaves no record at all. When an auditor asks how a change passed, someone has to reconstruct the answer.

AWS Interconnect Is Coming to Megaport

AWS Interconnect is coming to Megaport, giving enterprises and AI infrastructure providers another way to scale private AWS connectivity with automation, encryption, and built-in resilience. Megaport customers just got a new AWS connectivity option, and it fits perfectly with how we’ve always believed infrastructure should work: direct, automated, resilient, and easier to operate.
Featured Post

Monitoring CloudNativePG: What Changes When the Operator Owns Your Logs

Postgres operators like CloudNativePG (CNPG) have lowered the threshold for running highly available Postgres clusters on Kubernetes. Failover, replicas, backups, and rolling upgrades are handled by the operator, along with helpful niceties like automatic configuration of essential extensions. A few changes to a YAML manifest can provide a lot of value very quickly.

7 Best Cold Email Agencies for B2B Startups

Cold email remains one of the fastest ways for a young B2B company to reach buyers who have never heard of it. Doing it well takes clean data, sharp copy and sending domains that stay out of spam. Most startups do not have the people to run all of that in house. The seven agencies below sell cold email as a managed service, and every detail comes from their own websites. Prices appear only where an agency publishes them.