Operations | Monitoring | ITSM | DevOps | Cloud

What Is SOC 2 Compliance? Requirements, Controls, and Evidence

Your largest prospect has asked for your SOC 2 report. The deal sits still until you produce one. Most teams handle the first half of SOC 2 compliance fine. They control access. They run backups. They put changes through approval before anything ships. The second half is what stops them, and that half is proof. Your policy says access gets reviewed every quarter. The auditor wants the dated review, the signature on it, and the same record from eight months ago.

What are the Key Features and Evaluation Criteria for Vulnerability Assessment Tools?

How many findings from your last vulnerability scan have been verified as fixed? For most IT functions, the scan report is easy to produce, and the proof of closure takes far longer to assemble. That difference tends to surface at the worst possible moment, usually an audit or a post-incident review. Vulnerability assessment tools are meant to end that uncertainty. They inspect systems, match what they find against public vulnerability databases, and rank each weakness by how dangerous it is.

AI SAST Explained: Why Traditional Application Security Is Reaching Its Breaking Point | Harness Blog

AI has fundamentally changed software development. Developers are writing more code than ever. AI coding assistants can generate features, tests, documentation, and infrastructure configurations in minutes. Engineering organizations are seeing meaningful productivity gains as AI becomes embedded throughout the software development lifecycle. But there is a catch. Security teams now face a difficult reality: application security was already struggling to keep pace with software delivery before AI arrived.

Chaos Hub in docs, Prompt Library for MCP: what's new in Resilience Testing | Harness Blog

The latest Resilience Testing documentation update brings Chaos Hub directly into the docs, making it easier to discover and use fault, probe, and action templates. It also introduces a Prompt Library with ready-to-use AI prompts for Harness MCP, helping teams run resilience workflows faster using natural language.

Your OTel spans, our errors: A Sentry love story in one trace

You can already send OTel traces to Sentry. Point your OTLP exporter at Sentry’s endpoint, set environment variables, and your spans show up in the trace explorer. Our OTLP setup guide and “You Don’t Need to Pick One” walk you through that. But those spans are islands. You get a trace waterfall in Sentry, sure.

VM Migration - What Happens to Your NSX Segments in Kubernetes?

Planning a migration off NSX usually starts with a networking conversation. Segments, VLANs, routing topology and BGP peering are not things that map cleanly to Kubernetes-native constructs the way the NSX distributed firewall maps to Calico’s tiered microsegmentation. NSX virtualizes the network layer in ways that Kubernetes doesn’t replicate by default. There is no native concept of a Layer 2 segment or VLAN, for instance.

Why Staying Current Makes Modernization Easier

Most organizations don’t experience modernization as a single initiative. It unfolds over months and years, through a series of decisions made as technology shifts, business needs change, and operational demands grow. Teams adopt new capabilities, automate manual work, sharpen visibility, and strengthen security. These efforts look independent, but they share one requirement: a platform foundation that can keep up with continuous change.

Bring Your Backstage Context Into Every PagerDuty Incident

This blog post is part of PagerDuty’s ongoing series on how we’re helping customers navigate their journey towards autonomous operations. Read on to learn about how Custom Field Mapping for PagerDuty’s plugin for both Spotify for Backstage and Spotify Portal for Backstage now generally available builds towards this vision. It’s 2am. A Sev-1 fires, and your on-call responder opens the incident in PagerDuty. What’s waiting for them? A service name, and not much else. No tier.

SRE Agent Enhancements: Faster Triage, Greater Access Controls, Deeper System Connectivity

This blog post is part of PagerDuty’s ongoing series on how we’re helping customers navigate their journey towards autonomous operations. Read on to learn about how recent SRE Agent Enhancements build towards this vision. During an incident, everything is competing for attention at once. Responders lose time swiveling between tools, insights gathered by AI stay siloed instead of feeding into the next decision, and the pressure to move fast means learnings rarely stick.