Stack Archive · Specialized Directory

Enterprise Developer Platforms

Internal developer platforms at enterprise scale — golden paths, DevEx metrics, and platform-as-product thinking.

176analyses
17blueprints
Oct 16updated
Latest Analysis 176All analysis →

HCP Packer: Enforced Provisioners and the End of Governance by Trust

HCP Packer's new enforced provisioners let platform teams mandate compliance steps across all image builds—regardless of which team is building them.

· 2 min

Datadog DASH 2026: When Your Monitoring Platform Became an Agentic Operating System

Bits AI agents now detect, remediate, validate, and write code inside Datadog. DASH 2026 marks the shift from observability tool to autonomous engineering platform.

· 2 min

JFrog's Claude Code Plugin Puts Supply Chain Security Where AI Decisions Happen

JFrog embeds dependency validation, MCP server governance, and Artifactory access directly into Claude Code—shifting supply chain security left into the agentic development loop.

· 2 min

Microsoft Made the Agent Runtime Free—and That's Exactly the Point

Microsoft's Agent Framework—built on open-source OpenClaw—is now free. Scout ships on top of it. The pattern matches how mobile platforms evolved: free runtime at the base, managed services and compliance tooling as the revenue layer.

· 2 min

Replit's Shopify Integration Reveals the Real Play: Owning the Vibe Coder's Full Financial Stack

Replit added Shopify storefront generation to its monetization suite—joining RevenueCat subscriptions and Visa agentic payments to assemble a turn-key financial layer for apps built without traditional engineering teams.

· 2 min

How to Secure Kubernetes in the Age of AI Workloads: A Four-Layer Approach

AI agents on shared Kubernetes clusters are dynamic, bursty, and frequently egress-heavy — a threat surface that traditional NetworkPolicy wasn't designed for. Here's the four-layer approach that addresses it.

· 3 min

JFrog Just Put NVIDIA NIM Models Into Your Software Supply Chain

NVIDIA NIM inference microservices used to bypass organizational supply chain controls entirely — pulled directly from NVIDIA's NGC registry with no versioning, scanning, or audit trails. JFrog AI Catalog now treats NIM models as governed artifacts alongside every other dependency.

· 3 min

Patterns of Validation: How to Keep AI Agents from Wrecking Your Codebase

CircleCI's layered validation framework — feedforward instructions, mechanical hooks, and post-deploy observability — addresses the core ways AI coding agents fail silently.

· 2 min

Datadog's BewAIre: From 97.4% to 99.86% Accuracy on Malicious Package Detection

Datadog's BewAIre system detects malicious code in npm and PyPI packages with 99.86% accuracy using a two-stage AI pipeline — a lightweight filter that exits 95% of packages cheaply, then an agentic investigation loop for everything that looks suspicious.

· 3 min

JFrog's MCP Integration: Ask Your Platform to Provision Itself

JFrog's new MCP server lets AI coding agents like Cursor and Claude Code provision Artifactory repos, run Xray security scans, and trace release bundles — in plain language, without navigating dozens of UI screens.

· 3 min

Datadog Cut Spark Compute Costs 44% with an AI Agent. Here's Exactly How.

Datadog's internal ServiceQueryEdge job ran 17+ hours daily and cost $1.5k/day. An AI agent using Claude and Jobs Monitoring found three Scala-level optimizations that cut duration by 60% and cost by 44% — approximately $250K in annual savings.

· 3 min

JFrog's AI Asset Detection: Why Shadow AI Is the New Shadow IT

Coding agents are pulling MCP servers, models, and AI-generated code into your pipelines without approval. JFrog's detection framework classifies four categories of AI assets and explains how to build a continuous inventory before they become supply chain risks.

· 3 min

Kubernetes Dashboard Is Archived — Headlamp Is the Official Successor

The Kubernetes Dashboard project has been formally archived. Headlamp, its successor, adds multi-cluster support, application-centric views, and a plugin system while preserving the familiar single-cluster workflows.

· 2 min

Kubernetes Autoscaling at Scale: The Datadog Approach

From bulk UI activation to GitOps cluster profiles: how Datadog deploys Kubernetes autoscaling across an entire fleet without per-service configuration handoffs or manual YAML.

· 3 min

Inference-Aware Routing for LLMs: What Datadog Now Monitors

Kubernetes Inference Extension routes LLM traffic by KV cache state and LoRA adapter availability. Datadog surfaces the metrics that reveal whether that routing is actually working.

· 3 min

Helm's Former APT Mirror Was Taken Over. Here's What to Check.

The baltocdn.com domain that hosted Helm packages changed ownership May 19, 2026 and may be serving malicious content. Audit your CI pipelines, Dockerfiles, and scripts now.

· 4 min

The Kubernetes Integration Tax: What Tutorials Never Show You

Platform teams spend 80% of their time wiring CNCF tools together, not installing them. Here's where Prometheus, Cilium, and cert-manager actually fail in production.

· 3 min

Snyk Evo: Continuous Pentesting to Match the Pace of AI Code

Traditional pentesting averages 15 days of coverage per year. Snyk Evo runs AI agents against your application stack continuously. Here's the architecture and the gap it closes.

· 4 min

Platform Depth Unlocks AI Agents: The Unified Data Model Case

Fragmented tooling creates 20+ minute delays correlating data before rollout decisions. Unified data models eliminate that latency — and are the prerequisite for AI agents that can monitor and respond to production events autonomously.

· 2 min

Kubernetes v1.36: The Route Sync Metric That Quantifies CCM Waste

A new alpha counter in Kubernetes v1.36 makes the efficiency gap between default and watch-based route reconciliation observable — and reveals that a stable cluster generates 120 unnecessary syncs for every 1 actually needed.

· 2 min

SCIM in HashiCorp Vault: Identity Provisioning Without the Policy Risk

Vault 2.0 SCIM beta lets SailPoint and Okta provision users and groups — with deliberate architectural separation that blocks identity managers from touching Vault policies.

· 3 min

JFrog's Package Traffic Controller Closes the Last Open Door in Supply Chain Security

AI agents bypass artifact repos entirely. JFrog's new network-layer tool intercepts every outbound package request — developers, agents, and everyone else — and routes it through curation policy.

· 2 min

Datadog AI Impact: Connecting AI Coding Tool Usage to Deployment Performance

Datadog AI Impact maps AI-assisted commits to lead time, change failure rate, and deployment frequency — measuring AI tool ROI against actual delivery performance.

· 3 min

GitLab 19.0: Secrets Manager, Agentic Merge Requests, and the DevSecOps Platform Bet

GitLab 19.0 ships native secrets management, agentic merge request tools, and self-hosted open source models — a major DevSecOps platform update.

· 3 min

Newsletter coming soon.

Curated digests across AI, biohacking, photography, travel, and more. Be the first to know when we launch.