DevSecOps

Gemini 3.7 Flash: Price Cut and Performance Gains Reshape AI Agent Economics

Gemini 3.7 Flash: Price Cut and Performance Gains Reshape AI Agent Economics

AI, Application Development, Cloud, DevSecOps, Infrastructure, Machine Learning /

Google has launched Gemini 3.7 Flash, cutting per-token pricing by 50% while posting significant improvements in software engineering, web development, and agentic workflow benchmarks. The release, arriving just three weeks after Gemini 3.6 Flash, signals an accelerating competitive cadence at the AI inference layer. ECI Research data shows enterprise AI-assisted coding is scaling fast, making first-pass code accuracy and integration friction the metrics that matter most.

Gemini 3.7 Flash: Price Cut and Performance Gains Reshape AI Agent Economics Read More »

PDQ Expands Endpoint Vulnerability Management to macOS and Six Ticketing Platforms

PDQ Expands Endpoint Vulnerability Management to macOS and Six Ticketing Platforms

Application Development, Application Security, DevSecOps, Software Development /

PDQ has extended its vulnerability management workflow to macOS devices and added ticketing integrations with Zendesk, ServiceNow, and Halo. Three new APIs allow teams to push endpoint, vulnerability, and deployment data into external systems programmatically. The release positions PDQ as a unified endpoint management and security data platform for mixed Windows and macOS environments.

PDQ Expands Endpoint Vulnerability Management to macOS and Six Ticketing Platforms Read More »

AI Content Governance: Why the Output Layer Is the Real Risk

Why the Output Layer Is the Real Risk in AI Content Governance

AI Governance, Application Development, DevSecOps /

Enterprise AI governance has advanced on access logging and provenance tracking, but most programs still lack enforcement at the content output layer. Markup AI calls this “compliance theater.” ECI Research data shows nearly two-thirds of practitioners already see elevated risk from AI-assisted development, making the case for output-layer controls more urgent.

Why the Output Layer Is the Real Risk in AI Content Governance Read More »

IREN Acquires Mirantis: Completing the AI Cloud Stack

IREN Acquires Mirantis: Completing the AI Cloud Stack

AI, Application Development, Cloud-Native, DevSecOps, Infrastructure, Kubernetes /

IREN has completed its acquisition of Mirantis, adding the k0rdent AI orchestration platform to its owned data centers and compute infrastructure. The deal represents a deliberate vertical integration play targeting enterprise AI Cloud buyers. ECI Research data shows AI-enabled development tools are the top investment priority for enterprises in 2026, validating the market IREN is now positioned to serve.

IREN Acquires Mirantis: Completing the AI Cloud Stack Read More »

Digital Media Provenance: Why C2PA Matters Beyond AI Fakes

Why C2PA Matters Beyond AI Fakes

Application Development, DevSecOps, Software Development /

A Utah judge’s rejection of unverified surveillance footage exposed a structural gap in digital media provenance that predates AI by decades. DigiCert is advancing C2PA, an open standard that cryptographically signs every edit in a media file’s history. ECI Research analysis explains why this matters for ITDMs and developers building media pipelines.

Why C2PA Matters Beyond AI Fakes Read More »

Cequence Brings Agentic AI Governance Across MCP, API, and LLM

Cequence Brings Agentic AI Governance Across MCP, API, and LLM

Agentic AI, AI Governance, Application Development, Application Security, DevSecOps, Security /

Cequence Security has released AI Discovery, API Registry, LLM Registry, and Skill Registry for AI Gateway, alongside upgraded Agent Personas that bind an AI agent’s tools, model, and APIs to a single policy-enforced job description. The approach, which Cequence calls Agentic Zero Trust, is the first to govern MCP, LLM, and API surfaces under a unified agent-bound identity. This research note examines the architectural logic, the competitive stakes, and what it means for enterprise security and development teams.

Cequence Brings Agentic AI Governance Across MCP, API, and LLM Read More »

Crogl's Sovereign AI SOC Agent: Free, On-Prem, No Strings

Crogl’s Sovereign AI SOC Agent

AI/ML, Application Development, Application Security, DevSecOps /

Crogl has released its Enterprise AI SOC Agent as a free download, deployable in minutes within a customer’s own environment including air-gapped networks. The platform automates alert investigation and threat hunting without moving data outside the customer’s perimeter. ECI Research data on constrained engineering capacity and AI-generated security risk helps explain why this architecture is hitting the market at the right moment.

Crogl’s Sovereign AI SOC Agent Read More »

Codenotary Uses Claude AI to Secure immudb Development

Codenotary Uses Claude AI to Secure immudb Development

AI, Application Development, DevOps, DevSecOps, Open Source, Programming, Software Development /

Codenotary has been accepted into Anthropic’s Claude for OSS program, deploying AI assistance to accelerate development of immudb, its open source immutable database. The company is using Claude to detect subtle bugs, analyze concurrency issues, and generate regression tests, while maintaining mandatory human review of all code changes. The move positions Codenotary to ship faster at a moment when enterprise demand for software supply chain security infrastructure is near peak.

Codenotary Uses Claude AI to Secure immudb Development Read More »

Acalvio Deception Guardrails: Securing Agentic AI at Runtime

Acalvio Deception Guardrails are Securing Agentic AI at Runtime

Agentic AI, AI, AI/ML, Application Development, DevSecOps, Security /

Acalvio Technologies has launched Deception Guardrails, a capability that embeds deceptive honeytokens, decoy MCP servers, and fake credentials into AI agent workflows to detect compromise before enterprise systems are impacted. As agentic AI deployments scale, traditional input/output guardrails leave a critical detection gap that deception technology is well positioned to fill. This note examines the product logic, the security risk context, and what it means for ITDMs and developers building production AI agent infrastructure.

Acalvio Deception Guardrails are Securing Agentic AI at Runtime Read More »

AI Output Governance: The Blind Spot in Enterprise AI Strategy

AI Output Governance: The Blind Spot in Enterprise AI Strategy

AI, Application Development, DevSecOps, Enterprise IT Strategy, Machine Learning /

Enterprise AI governance frameworks have focused on access control and data inputs, leaving output quality and compliance largely unmanaged. Markup AI is making the case for enforceable content standards that apply to what AI produces, not just what goes in. ECI Research data shows governance spending is rising, but organizations need to ensure it’s solving the right problem.

AI Output Governance: The Blind Spot in Enterprise AI Strategy Read More »