Datadog BYOC Cross-Cluster Queries: One Search, Data Stays Put
Datadog BYOC Logs can now search several self-hosted clusters in one query, including for AI agents via MCP. What that fixes for data-residency observability.
Datadog Retired Its Host Scanner: 4 Lessons From the Migration
Datadog swapped its SSH host scanner for the Datadog Agent after a six-month parallel run. Its vulnerability management lessons apply to any scanner swap.
Datadog IaC Security Now Accepts Custom Rego Rules — and Can Block PRs That Fail Them
Datadog IaC Security now supports organization-specific custom rules written in Rego, covering Terraform, CloudFormation, Kubernetes manifests, Ansible, Dockerfiles, and GitHub Actions. PR Gates can block merges on policy violations. Configuration lives in code-security.datadog.yaml.
HCP Terraform Now Has Pre-Written AWS and CIS Compliance Policies You Don't Have to Maintain
HCP Terraform launched a native pre-written policy library with AWS Foundational Security Best Practices and CIS Foundations Benchmark policies. Platform teams can enforce them at Advisory or Mandatory level without writing or maintaining Rego/Sentinel. Azure and GCP policies are coming. Currently in public beta.
India's Regulatory Wave: The 5 Security Controls Every Organization Needs Now
DPDP, SEBI CSCRF, CERT-In, and RBI data localization all demand the same five controls. HashiCorp Vault and Boundary address most of them directly.
How to Trace AWS Lambda Durable Functions with Datadog
Datadog's Node.js and Python tracers now instrument AWS Lambda Durable Functions automatically — connecting multi-invocation workflows into a single unified flame graph without code changes.
Packer v1.16.0 Brings SLSA Provenance to Machine Images — Here's What That Means
HashiCorp's Packer v1.16.0 adds native SLSA provenance generation and verification to machine image builds. The result: cryptographically signed build records, four signing modes, and packer verify-attestation for enforcement pipelines.
Datadog's Azure Integration No Longer Needs a Secret to Rotate
Secretless authentication replaces static client secrets with OIDC-based federated identity. No expiration dates, no rotation schedules, no telemetry gaps when someone forgets to update a credential.
DevGovOps: The Compliance Framework AI-Speed Development Actually Needs
AI agents commit 10–50x faster than human developers. EU DORA compliance requires continuous proof of controls. DevGovOps is the framework that reconciles the two.
Terraform and Azure in the AI Era: Governing Infrastructure That Won't Hold Still
AI experimentation is creating unmanaged Azure resources faster than ops teams can track them. Terraform Query and Sentinel policy-as-code are how teams are bringing order back.
Datadog Achieves GovRAMP High: What It Means for State and Local Government Observability
GovRAMP High authorization opens Datadog's full platform to state, local, tribal, and educational agencies — addressing the fragmented monitoring problem endemic to government IT.
OMB M-26-14: What Federal Agencies Must Do About Logging — and How Datadog Helps
The new OMB memo replaces prescriptive logging mandates with a 320-day maturity framework across four levels. Datadog's FedRAMP High platform maps to each level directly.
HCP Vault Dedicated Gets Cluster Disaster Recovery — and a DR Testing Path
HashiCorp's HCP Vault Dedicated now supports cluster-level disaster recovery in public preview, enabling failover for cluster-specific incidents and — critically — scheduled DR testing without waiting for a regional outage.
AI Writes Rego Fast. JFrog's AppTrust Playground Validates It Against Real Artifacts.
OPA dominates policy-as-code at 62% of all policy files. AI tools generate it in seconds. JFrog's Policy-as-Code Playground closes the gap between AI-generated Rego and production-safe policy.
HCP Packer: Enforced Provisioners and the End of Governance by Trust
HCP Packer's new enforced provisioners let platform teams mandate compliance steps across all image builds—regardless of which team is building them.
JFrog Curation: How Compliant Version Selection Stops Policies From Breaking Builds
JFrog's Compliant Version Selection routes blocked packages to the highest policy-compliant version — keeping builds green without relaxing security controls.