DevSecOps

AI Code Visibility Gap Widens as Production Use Hits 44.7%

AI Code Visibility Gap Widens as Production Use Hits 44.7%

Flux’s AI Code Generation Reality Check finds nearly half of organizations are running AI-generated code in production, while 35% can’t ship it confidently due to inadequate visibility. ECI Research examines the governance and tooling gaps this creates, and what engineering leaders should do next.

AI Code Visibility Gap Widens as Production Use Hits 44.7% Read More »

AI Code Governance: GitLab Report Reveals a Control Crisis

AI Code Governance: GitLab Report Reveals a Control Crisis

GitLab’s AI Accountability Report surveyed 1,528 developers and technology buyers and found that AI code generation has outpaced the controls needed to manage it. Eighty percent of organizations adopted AI coding tools before building governance policies, and 43% cannot reliably distinguish AI-generated code from human-written code in their own codebase. The accountability phase of AI-assisted development has arrived, and most enterprises are not ready.

AI Code Governance: GitLab Report Reveals a Control Crisis Read More »

Bitdefender 2026 Scam Report: Online Fraud at Industrial Scale

Bitdefender 2026 Scam Report: Online Fraud at Industrial Scale

Bitdefender’s 2026 Global Scam Intelligence Report documents how online fraud has matured into a coordinated, cross-platform criminal industry. With 14% of consumers victimized and 1 in 20 text messages showing signs of fraud, the implications extend well beyond consumer protection into enterprise security architecture and developer tool decisions.

Bitdefender 2026 Scam Report: Online Fraud at Industrial Scale Read More »

LocalStack Blueprint Brings AI Agents to Local Cloud Testing

LocalStack Blueprint Brings AI Agents to Local Cloud Testing

LocalStack has released a blueprint enabling AI agents to provision and test cloud applications inside a local container rather than against live cloud infrastructure. The move directly addresses the infrastructure friction created by agentic code generation at scale. ECI Research analyst commentary explains what this means for ITDMs managing cloud costs and developers building agentic CI/CD pipelines.

LocalStack Blueprint Brings AI Agents to Local Cloud Testing Read More »

AI Agent Runtime Risk: Why 3M Daily Interactions Demand New Observability

AI Agent Runtime Risk: Why 3M Daily Interactions Demand New Observability

Codenotary’s AgentMon platform is monitoring more than 3 million AI-agent interactions per day, with 7% triggering security or compliance anomalies. ECI Research analyzes why this milestone signals a new category of enterprise risk that traditional observability platforms weren’t built to address. ITDMs and platform engineers need a governance strategy now, before a material incident forces one.

AI Agent Runtime Risk: Why 3M Daily Interactions Demand New Observability Read More »

Stacklet's Autonomous Cloud Governance Play at FinOps X

Stacklet’s Autonomous Cloud Governance Play at FinOps X

Stacklet is expanding its agentic AI layer and AI-resource coverage at FinOps X, positioning its Cloud Custodian policy engine as the enterprise control plane for autonomous cloud governance. The company’s decade of open-source context and proven remediation track record differentiate it in a market where governance tooling mostly produces findings rather than fixes. ECI Research analysis covers what this means for IT decision-makers managing AI cloud spend and for developers navigating AI-generated infrastructure code.

Stacklet’s Autonomous Cloud Governance Play at FinOps X Read More »

AI Governance Compliance: Closing the Gap Before August 2026

AI Governance Compliance: Closing the Gap Before August 2026

Most enterprises are applying security tooling to an AI governance problem, and the mismatch is creating real compliance exposure. With EU AI Act high-risk provisions taking full force in August 2026 and updated HIPAA rules now demanding decision-level evidence, the window to close this gap is narrowing. This note examines what Trussed.ai’s approach means for ITDMs and developers building on agentic architectures.

AI Governance Compliance: Closing the Gap Before August 2026 Read More »

SolidRun + Peridio: Closing the Physical AI Deployment Gap

SolidRun + Peridio: Closing the Physical AI Deployment Gap

SolidRun and Peridio have combined purpose-built vision AI hardware with a production-grade OS to address the infrastructure gap between prototype and deployed fleet. The integration delivers atomic OTA updates, SBOM support, and EU Cyber Resilience Act alignment as day-one capabilities. For enterprise buyers, this shifts physical AI deployment from a months-long infrastructure project to a weeks-long integration effort.

SolidRun + Peridio: Closing the Physical AI Deployment Gap Read More »

Financial Services Faces a Two-Front Cyber Threat in 2026

Financial Services Faces a Two-Front Cyber Threat in 2026

Black Kite’s 2026 State of Financial Services report documents a simultaneous rise in direct ransomware attacks and vendor ecosystem vulnerabilities. Q1 2026 ransomware incidents jumped 76% year-over-year while critical CVEs across finance-concentrated vendors rose 387%. ECI Research examines what this two-front threat means for ITDMs and security teams.

Financial Services Faces a Two-Front Cyber Threat in 2026 Read More »

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

IBM and Red Hat have announced Project Lightwell, a $5 billion initiative pairing 20,000 engineers with AI to secure enterprise open source software at scale. The clearinghouse model targets supply chain vulnerabilities across independent libraries, AI frameworks, and data streaming platforms. ECI Research examines what this means for ITDMs and developers navigating an increasingly fragmented open source security landscape.

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale Read More »