Datadog's 4th DevEx Dimension: Why AI Changes What You Have to Measure
Datadog added a 4th dimension to the DevEx framework for the AI era: AI adoption and impact. With 80% AI-assisted PRs, what you measure has to change.
Datadog API Authentication Detection: Why Three States Beat Two
Datadog App & API Protection adds three-state auth classification to eliminate false positives. How evidence-based detection works at scale.
AI Agent Guardrails: Where You Place Them Matters as Much as What They Do
Reactive guardrails on tool outputs miss the attack. Why pre-execution placement and multi-hook coverage change AI agent security posture.
The AI Governance Illusion: 97% of Teams Think They're Covered — and Aren't
JFrog found 97% of orgs claim AI model governance while 495 malicious models sat on Hugging Face. The confidence-reality gap is the real security risk.
Terraform 1.15: What Dynamic Module Sources Change for Platform Teams
Terraform 1.15 introduces dynamic module sources, variable deprecation, native Windows ARM64 support, and inline type conversion. Here's what each feature unlocks for IaC at scale.
Datadog Database Investigator: Root Cause Analysis Without a DBA
Datadog's agentic Database Investigator diagnoses latency spikes, connection pool exhaustion, and replication lag without requiring dedicated DBA expertise.
CircleCI Chunk: CI Validation Inside the Agent's Inner Loop in Under 60 Seconds
CircleCI Chunk sidecars bring CI feedback into the agent's inner loop — microVM environments that validate code locally in 60 seconds, no commit or push required.
HCP Terraform + Infragraph: A Live Map of Your Entire Cloud Estate
HCP Terraform's Infragraph delivers a live knowledge graph of your multi-cloud estate — unmanaged resources, drift, and ownership visible in one place.
HashiCorp Vault SPIFFE: The Identity Layer Agentic AI Has Been Missing
Vault Enterprise 1.21 now issues SPIFFE identities to AI agents and non-human workloads — giving autonomous systems the cryptographic credentials zero-trust security requires.
HashiCorp Vault SSH: Short-Lived Certificates Replace Static Keys at Scale
HashiCorp Vault's SSH Secrets Engine replaces long-lived static SSH keys with 30-minute certificates signed by an internal CA. How the architecture eliminates four structural risks in enterprise SSH access management.
HashiCorp Vault Radar: Why Finding Secrets Isn't Enough
HashiCorp's Vault Radar reframes secret detection as a remediation problem. Four pillars that shift the security metric from secrets found to secrets resolved per week.
JFrog MCP Registry: Governing AI Agents at the Tool Level
JFrog MCP Registry enforces AI agent permissions at tool level, not server level — giving Google Cloud teams governed self-serve MCP access without accepting blind security risk.
k0s and k0rdent: Kubernetes Multi-Cluster Management Without the Control Plane Tax
k0rdent and k0s: how Hosted Control Planes remove the per-cluster overhead that makes Kubernetes fleet management expensive for platform teams.
JFrog + SageMaker: Building the Governed AI Model Supply Chain That S3 Can't
Integrating JFrog Artifactory with AWS SageMaker closes the governance gap in AI model pipelines — AIBOM generation, Hugging Face curation proxy, and immutable versioning replacing unstructured S3 buckets.
JFrog Skills: Open-Source Toolkit for AI Agents That Understand Software Supply Chains
JFrog's open-source Platform Skills library lets AI agents query CVE data, verify artifact provenance, and enforce governance policies using natural language — with MCP support for Cursor and Claude Code.
Datadog Governance Console: Observability Gets a Policy Enforcement Layer
Datadog's new Governance Console shifts observability management from reactive cleanup to proactive policy enforcement — automated credential revocation, drift detection, and usage accountability built in.
CircleCI as a Codex Plugin: What Agentic CI/CD Actually Looks Like
CircleCI just shipped a native Codex plugin that lets AI agents inspect pipelines, debug failures, and optimize configs without a context switch. Here's what that unlocks.
AI Supply Chain Governance: Why Model Safety Isn't Enough
JFrog's 2026 analysis shows why AI model safety and trusted AI governance are two different things — and why most enterprises haven't closed the gap.
Datadog's Open Source AI SAST: 90% Detection, Fewer False Positives
Datadog released an open source AI-native SAST tool that hits 90% command injection detection on OWASP benchmarks — up from 59% with traditional rules. Here's the architecture and why false positives were the real problem.
Platform Engineering Metrics: What to Measure, What to Ignore
Datadog maps the three-tier metrics hierarchy every platform team needs — outcomes, drivers, diagnostics — and explains why optimizing CI duration in isolation is a trap. Here's the framework.
Terraform + AWS Native OIDC: Eliminating Static Credentials From Multi-Account IaC
AWS Account Factory for Terraform now supports native OIDC with a single config flag — no stored secrets, auto-generated IAM roles, and consistent zero-standing-credential provisioning across every account.
Datadog CI/CD Threat Matrix: A MITRE Framework for Pipeline Security
Datadog published a MITRE ATT&CK-style threat matrix for CI/CD pipelines — 10 attack tactics mapped to the specific exposure points where compromised pipelines ship malicious code.
Ingress NGINX Is EOL: What the K8s Gateway API Migration Actually Requires
Ingress NGINX reached end-of-life in March 2026 with unpatched critical CVEs. Kubernetes Gateway API is the designated successor — here's what the migration breaks and what Datadog maps out.
Datadog Code Security MCP: Security Scanning Inside AI Code Generation
Datadog launched an MCP server that runs SAST, SCA, secrets detection, and IaC scanning during AI code generation — catching vulnerabilities before they reach a pull request.