Operations | Monitoring | ITSM | DevOps | Cloud

Latest posts

Shipped: Rightsize Kubernetes workloads without leaving your MCP client

Changing a Kubernetes resource request takes two numbers: what the workload requests, and what it uses. The CloudZero MCP server now returns both, by cluster, namespace, or workload. This gives you a number you can defend. Usage comes back as P95 over the date range you query, 30 days by default. When an engineering lead asks whether a service runs on a smaller request, that is the figure that settles it. Over-provisioning and under-provisioning show up on the same query.

Our Customer Success AI bill tripled. Here's why we're spending more.

Pop quiz: If you spend $40,000 per month on Anthropic, and you’ve got two customers, what’s your cost per customer? If you bypassed the easy answer of $20,000 and said, “Scott, you old trickster, that’s not enough information to answer that question,” you’ve won today’s prize: a lesson in the perils of average costs. Let’s flesh out the situation: You put an AI feature in your product, a document assistant powered by Claude.

For whoever has to explain the cloud bill to finance every month.

As infrastructure gets more complex, with workloads spread across clouds, regions, and providers, every hop your data takes between them adds up. Where do these costs actually come from? Has your team ever traced a surprise bill back to data movement? With Megaport, cloud egress costs are minimized by routing data privately between providers, avoiding the higher transfer rates associated with public internet routing.

env zero Demo: Discover Every Cloud Resource

See how env zero discovers and manages every cloud resource across AWS, Azure, and GCP—including resources deployed outside of Infrastructure as Code. In this overview, we walk through env zero's cloud resource discovery and environment migration capabilities. You'll see how the Cloud Compass dashboard maps your entire resource estate, how to tell whether a resource was created by IaC, click ops, or an API call, and how to bring existing Terraform workspaces and VCS repositories into env0 in bulk.

env zero Demo: Codify Everything

Turn manually-created cloud resources into Infrastructure as Code, then package that code into reusable templates your whole team can deploy. This walkthrough covers two env zero capabilities that work well together: using Cloud Compass to codify click ops resources into Terraform or OpenTofu, and building reusable templates so other users can deploy proven infrastructure without writing code or configuring integrations themselves.

env zero Demo: Govern Continuously

How env zero keeps Infrastructure as Code under control at scale — custom roles and permissions, Policy as Code guardrails, and automated drift detection with remediation. This walkthrough covers env zero's governance features: building granular custom roles for your teams, enforcing policy guardrails that stop bad configurations before they deploy, and catching infrastructure drift the moment someone changes something outside the platform.

env zero Demo: Accelerate Self-Service Infrastructure

How env zero turns Infrastructure as Code into true self-service—developers deploy pre-approved infrastructure in a few clicks, and multi-step workflows handle the complex stuff automatically. This walkthrough shows what happens once discovery, codification, and governance are in place: developers pull from a catalog of approved resources without filing tickets or writing Terraform, and platform teams keep their guardrails intact. We also cover workflows, which chain multiple deployments into a single run.

Log Processing: What Happens to a Log Line Before You Can Search It

A log line arrives as plain text and leaves as a record you can query. Six steps sit between those two states. Each one adds something useful, and each one costs you time, CPU, or storage. Most teams never look at that chain until a search comes back empty. Here is what log processing does to an event, step by step: By the end you can look at your own chain. You will know what each step buys you. Six steps turn a raw log line into a searchable record.

PII Redaction in Logs: Mask, Redact, Hash, or Drop?

Sensitive values reach your logs without anyone deciding they should. A debug line prints a whole request object. An error message carries the query string. A customer email address is suddenly stored in three systems. PII redaction in logs then gets treated as one setting to switch on. In practice it covers four separate treatments. The value is already inside the message before log ingestion finishes. In this blog, you will: By the end you can write a rule for each field and defend it.

The Evolution of JFrog AI Catalog: Your AI Control Plane for Agentic Development

In a single morning, a coding agent can pull an open-source model, connect to an unvetted MCP server, and execute a code-optimizing skill from the web. In the rush toward agentic automation, these AI assets quietly bypass traditional security reviews, creating new attack vectors across the software supply chain. Closing this blind spot has been the driving force behind the JFrog AI Catalog since its launch at swampUP 2025.