Stack Archive · Specialized Directory

Enterprise Developer Platforms

Internal developer platforms at enterprise scale — golden paths, DevEx metrics, and platform-as-product thinking.

176analyses
17blueprints
Oct 16updated
Featured

Datadog Scout 1.0: Cheaper AI SRE Investigations, Run More Often

Datadog Scout 1.0 is an SRE model Datadog says matches frontier models at 3 to 8 times lower cost. What it changes for on-call teams using Bits AI.

· 3 min read · Analysis
System Blueprints 17All blueprints →
Browse by Topic
Latest Analysis 176All analysis →

GitLab 19.5: MCP Server GA Lets Outside Agents In, With Limits

GitLab 19.5 makes its MCP server generally available, governs Claude Code and Cursor sessions, and adds rate limits. What platform teams should configure first.

· 3 min

GitHub Star History API: From 2,500 Requests to 24

GitHub's star history API cuts react/react's full curve from about 2,511 requests to 24 with no stargazer identities. How filtering by time first made it cheap.

· 3 min

Kueue Pending Jobs: A Headlamp Checklist for Admission Failures

Kueue pending jobs often aren't a scheduler problem. A Headlamp-first checklist from the Kubernetes blog for tracing admission, quota and queues, and limits.

· 3 min

GitHub Secret Scanning: Why a Small Model Beat the LLM Pipeline

GitHub secret scanning swapped an LLM for a fine-tuned ModernBERT classifier: 86% faster scans, 98% lower cost, fewer false alarms. How it works for teams.

· 3 min

GitLab AI Credit Caps: Three Levers for Controlling Agent Spend

GitLab AI credit caps, open-weight models and Orbit target agent spend. What each lever controls, GitLab's benchmarks, and the order to use them.

· 3 min

Octopus Deploy Remote MCP: Agents Can Now Ship Releases

Octopus Deploy remote MCP lets AI agents deploy releases and run runbooks through a built-in /mcp endpoint. What it exposes, and the guardrails to set first.

· 3 min

Docker Hub Access Token Vulnerability: A Two-Year Silent Transfer

A Docker Hub access token vulnerability let account conversion hand live PATs to another user for two years. What Docker found and changed, and what to check.

· 3 min

Datadog BYOC Cross-Cluster Queries: One Search, Data Stays Put

Datadog BYOC Logs can now search several self-hosted clusters in one query, including for AI agents via MCP. What that fixes for data-residency observability.

· 3 min

Datadog Retired Its Host Scanner: 4 Lessons From the Migration

Datadog swapped its SSH host scanner for the Datadog Agent after a six-month parallel run. Its vulnerability management lessons apply to any scanner swap.

· 3 min

Datadog CI/CD Optimization: The Case for Treating Your Pipeline as a Production Service

Datadog's CI/CD Optimization combines pipeline telemetry, flaky test detection, and test impact analysis. Betterment cut builds from 40 minutes to under 10.

· 3 min

Datadog Observability Pipelines Now Routes Security Logs to Exabeam — Without Blinding Your SIEM

Datadog Exabeam Packs filter Cisco ASA, CrowdStrike, and Palo Alto logs before SIEM ingest — cutting costs while keeping threat-relevant signals intact.

· 2 min

Databricks Monitoring: The 7 Dimensions Most Teams Only Partially Cover

A Datadog framework for Databricks monitoring across seven dimensions, from queue wait time as a warehouse-exhaustion signal to GPU memory on serving endpoints.

· 3 min

The First 72 Hours of Ransomware: Why 'Restored Isn't Recovered' Changes Your Incident Response Plan

Restoring systems isn't recovering the business. Ransomware's first 72 hours need data validation, dependency checks, and SIEM mapped to MITRE ATT&CK.

· 4 min

CircleCI's Intent-Driven Development: A Six-Step Framework for Steering AI Agents from Idea to Ship

CircleCI's intent-driven development gives AI coding agents explicit constraints and success criteria via intent documents. A six-step framework.

· 5 min

JFrog: AI Coding Tools Are Generating Vulnerabilities 10 Times Faster Than They're Being Fixed

JFrog's 2026 report: AI coding tools add about 35 CVEs a month as disclosures rose 92% in 2025, and CISA now advises against severity-only vulnerability triage.

· 4 min

Distributed DataFusion: Datadog Open-Sources a Framework for Running One Query Across Many Machines

Datadog open-sourced a framework that runs one Apache DataFusion query across many machines, reporting 10x speedups on long queries versus one node.

· 5 min

Datadog Supply Chain Firewall: Block Malicious npm and pip Packages Before They Install

Datadog's open-source Supply Chain Firewall checks npm, pip, and poetry installs against threat databases and blocks malicious packages before they install.

· 5 min

Guardrails, Not Gates: A Better Framework for Platform Team Policy

CNCF argues platform policies fail as gates. Its framework of validation, mutation, generation, and verification makes developer experience the primary metric.

· 4 min

How Datadog Built an Async-Aware Python Profiler — and Why Traditional Profilers Fail Async Code

Python profilers can't follow asyncio tasks. How Datadog rebuilt task dependency trees and cut overhead over 60% in its async-aware profiler.

· 5 min

Zero-Trust AI Agent Access in Practice: IBM watsonx and HashiCorp Boundary

A HashiCorp proof of concept gives AI agents infrastructure access via Boundary and Vault without exposing credentials, with IBM watsonx doing the reasoning.

· 4 min

Datadog Extends RUM to Shopify and Salesforce — Monitoring Revenue Flows You Don't Control

Datadog RUM now covers Shopify and Salesforce Experience Cloud, so teams can monitor checkout funnels and errors on frontends they can't instrument.

· 4 min

CircleCI's Framework for Testing AI Agents in CI: Contract Tests and Agent Evals

CircleCI's two-layer agent testing in CI: deterministic contract tests as hard gates, plus statistical agent evals against baselines at a slower cadence.

· 4 min

Datadog Tap to Parse: Click a Log Field, Get a Grok Parser — No Regex Required

Datadog Tap to Parse is GA: click a log field and get a generated parsing rule to review, no Grok syntax needed. Where it fits in the log lifecycle.

· 3 min

Datadog Trained a 9B Model for $0.003 Per Alert Investigation — Here's the Architecture

Datadog fine-tuned a 9B model to 87% of its teacher's recall at 5% of the cost, about $0.003 per production alert investigation. The architecture behind it.

· 3 min

Newsletter coming soon.

Curated digests across AI, biohacking, photography, travel, and more. Be the first to know when we launch.