DevSecOps

SolidRun + Peridio: Closing the Physical AI Deployment Gap

SolidRun + Peridio: Closing the Physical AI Deployment Gap

AI, Application Development, DevSecOps, Infrastructure /

SolidRun and Peridio have combined purpose-built vision AI hardware with a production-grade OS to address the infrastructure gap between prototype and deployed fleet. The integration delivers atomic OTA updates, SBOM support, and EU Cyber Resilience Act alignment as day-one capabilities. For enterprise buyers, this shifts physical AI deployment from a months-long infrastructure project to a weeks-long integration effort.

SolidRun + Peridio: Closing the Physical AI Deployment Gap Read More »

Financial Services Faces a Two-Front Cyber Threat in 2026

Financial Services Faces a Two-Front Cyber Threat in 2026

Application Development, Cyber Security, DevSecOps, FinOps, Security /

Black Kite’s 2026 State of Financial Services report documents a simultaneous rise in direct ransomware attacks and vendor ecosystem vulnerabilities. Q1 2026 ransomware incidents jumped 76% year-over-year while critical CVEs across finance-concentrated vendors rose 387%. ECI Research examines what this two-front threat means for ITDMs and security teams.

Financial Services Faces a Two-Front Cyber Threat in 2026 Read More »

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

Application Development, Compliance, Cyber Security, DevSecOps, Open Source /

IBM and Red Hat have announced Project Lightwell, a $5 billion initiative pairing 20,000 engineers with AI to secure enterprise open source software at scale. The clearinghouse model targets supply chain vulnerabilities across independent libraries, AI frameworks, and data streaming platforms. ECI Research examines what this means for ITDMs and developers navigating an increasingly fragmented open source security landscape.

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale Read More »

Open Source Summit 2026 wrap-up

Open Source Summit 2026 Wrap-Up: Governance, Sustainability, and the New Reality of Open Innovation

AI, Application Development, Application Security, DevOps, DevSecOps, FinOps, Kubernetes, Observability, Open Source, Open Source Summit 2026, Security /

A detailed Open Source Summit 2026 wrap-up covering AI governance, maintainer sustainability, runtime security, open infrastructure, and the future of open innovation.

Open Source Summit 2026 Wrap-Up: Governance, Sustainability, and the New Reality of Open Innovation Read More »

Valkey 9.1: Open Source Database Eyes AI Workloads

Valkey 9.1: Open Source Database Eyes AI Workloads

AI, Application Development, Cloud-Native, DevSecOps, FinOps, Open Source, Open Source Summit 2026 /

Valkey 9.1 expands beyond caching with full-text and vector search, per-database access controls, and multithreading improvements. The Linux Foundation project is positioning itself as a consolidated in-memory data platform for AI and modernization workloads. ECI Research examines the competitive implications and what the Valkey 10 roadmap signals for enterprise infrastructure strategy.

Valkey 9.1: Open Source Database Eyes AI Workloads Read More »

Humanix Detects Live Help Desk Procedure Violations | ECI Research

Humanix Detects Live Help Desk Procedure Violations | ECI Research

AI, Application Development, Compliance, Cyber Security, DevSecOps, Enterprise IT Strategy /

Humanix has announced the first capability to detect live procedure violations during IT help desk interactions, flagging social engineering attacks at the moment a policy is bypassed. ECI Research analyzes why this human-layer security gap remains underserved and what it means for enterprise security teams. The capability targets the precise window between procedural failure and unauthorized access.

Humanix Detects Live Help Desk Procedure Violations | ECI Research Read More »

Edera at Open Source Summit 2026: Container Runtime Security

Edera at Open Source Summit 2026: Container Runtime Security

AI, Application Development, Containerization, DevSecOps, Open Source, Open Source Summit 2026, Security /

At Open Source Summit 2026, Edera made the case that containers were never security boundaries and that runtime isolation is the missing layer in most enterprise security stacks. A new partnership with Minimus pairs rapid patching with runtime protection. ECI Research examines the implications for cloud-native security strategy.

Edera at Open Source Summit 2026: Container Runtime Security Read More »

Google AI Threat Defense: Autonomous Security Arrives | ECI Research

Google AI Threat Defense: Autonomous Security Arrives | ECI Research

AI, Application Development, Cloud, DevSecOps, Enterprise IT Strategy, Security /

Google Cloud has launched Google AI Threat Defense, an autonomous platform designed to prioritize and remediate vulnerabilities faster than attackers can exploit them. ECI Research examines the competitive implications, the developer experience questions, and the governance gaps enterprises must close before deploying autonomous security at scale.

Google AI Threat Defense: Autonomous Security Arrives | ECI Research Read More »

GitLab 19.0: Agentic DevSecOps and the AI Paradox

GitLab 19.0: Agentic DevSecOps and the AI Paradox

AI, Application Development, DevSecOps, Platform Engineering, Software Development /

GitLab 19.0 addresses the AI Paradox: code generation has accelerated, but credential governance, merge workflows, and pipeline security have not kept pace. The release embeds agentic capabilities and unified secrets management directly into the platform where teams already work. ECI Research breaks down what this means for ITDMs and developers evaluating DevSecOps platform consolidation.

GitLab 19.0: Agentic DevSecOps and the AI Paradox Read More »

Edera and Minimus Unite for End-to-End Container Security

Edera and Minimus Unite for End-to-End Container Security

Application Development, DevSecOps, Open Source, Programming, Software Development /

Edera and Minimus have announced a strategic partnership combining hardened container images with hypervisor-layer runtime isolation. The joint solution targets enterprises in financial services, federal government, and critical infrastructure facing AI-accelerated vulnerability discovery. ECI Research examines what this means for ITDMs and security engineers navigating a fundamentally changed threat landscape.

Edera and Minimus Unite for End-to-End Container Security Read More »