Operations | Monitoring | ITSM | DevOps | Cloud

In the fast-paced world of modern software delivery, compliance is often a bottleneck. While our existing OPA-based Policy as Code feature has long empowered teams to encode complex authorization checks and enforce granular governance across their DevOps workflows, we know that starting from a blank page can be daunting. Security and governance teams struggle to keep up with the volume of releases, while developers often find the initial setup of these policies to be time-consuming.

For years, security teams have been sold the same bargain: send in more data, buy more tools, tune more rules, and you'll be better protected. In practice, a lot of teams have ended up with the opposite. They're carrying more cost and more complexity, and they still don't have much confidence that their detections are actually working the way they should. That's the backdrop for why Cribl is acquiring CardinalOps.

By: Tucker Callaway, CEO at Mezmo The market keeps saying “SaaS is dead.” That’s probably true, but it’s also incomplete. What’s actually dying is the idea that value lives inside a vendor-controlled black box. The next era is about utilities: unlimited coding capacity and unlimited analytical capability. And if those two utilities are real, then the vendor model has to change.

PagerDuty fires. You open the incident. Title, timestamp, nothing else. Whatever context exists is in someone's head, in a Slack thread from two weeks ago, or in a runbook nobody has touched since the last reorg. We got tired of that. So we put an AURA agent behind a Slack bot and pointed it at our own production environment.

AI has changed how software gets built. It hasn't changed how software gets run. Most of the AI money in software has gone into the IDE: code generation, copilots, developer assistants, faster pull requests. That work matters. But writing software is one slice of the lifecycle. The harder problem, and the more expensive one, is running that software in production. Production is where systems fail in ways nobody predicted. Incidents don't stay inside one service.

Automation has always promised the same basic things: less work, faster resolution, and more consistency. What has changed is how much judgment automation can now apply before work begins. Traditional process automation is excellent at executing known steps. Agentic automation, though, adds a new layer: AI systems that can decide which action or workflow should happen next. That difference matters a whole lot.

Idle resources in your data center are a liability. Every unused server drawing power, every underutilized rack consuming cooling capacity, and every stranded port sitting dark on a switch represents money spent with no operational return. That's always been true for traditional compute. It's even more consequential as organizations invest in GPU infrastructure for AI workloads, where the hardware is an order of magnitude more expensive and the cost of underutilization scales accordingly.

Agentic IT operations have arrived. It’s no longer a question of if enterprise IT departments will adopt agentic ITOps, but how quickly. Every year, IT environments grow more distributed, complex, and difficult to monitor with legacy tools and processes. At the same time, the pace of AI development is accelerating the volume of changes and incidents, straining teams that are still trying to manage them manually, reactively, and one alert at a time.

If an audit happened tomorrow, could you account for every IT asset your organization owns? For many IT teams, that question gets harder every quarter. Assets are scattered across offices, remote devices, spreadsheets, and cloud subscriptions, making them difficult to track. By the time an audit or renewal arrives, the gaps have already become costly.

You rely on NetFlow to give you the visibility needed to trace bandwidth consumption, identify suspicious traffic patterns, and plan for future capacity requirements. However, monitoring flow data has grown increasingly complex over the past few years. As enterprise environments expand into hybrid architectures and user traffic volumes multiply, capturing and processing this data creates operational challenges.