DevSecOps

AI Code Verification: Why the Bottleneck Has Moved | ECI Research

AI Code Verification: Why the Bottleneck Has Moved | ECI Research

AI, Application Development, Automation, DevSecOps, Platform Engineering /

AI code generation has reached near-commodity speed, but shipping AI-generated software confidently requires a verification and governance layer most organizations haven’t built yet. Qodo CEO Itamar Friedman argues that judgment is moving up the stack, from lines of code to architecture and intent definition. ECI Research examines what the agentic development transition actually demands from engineering teams and their tooling.

AI Code Verification: Why the Bottleneck Has Moved | ECI Research Read More »

MCP Client Compatibility: Why caniuse.dev Changes the Game

MCP Client Compatibility: Why caniuse.dev Changes the Game

AGNTCon + MCPCon North America 2026, AI, Application Development, DevSecOps, Events, Platform Engineering, PyTorch Conference /

MCPJam has launched caniuse.dev, a compatibility reference tool that surfaces behavioral differences in MCP support across AI clients including ChatGPT, Claude, Cursor, and GitHub Copilot. The tool addresses a critical gap between a shared protocol and consistent runtime behavior. For enterprise teams, it reframes MCP governance as a pipeline concern rather than a one-time audit.

MCP Client Compatibility: Why caniuse.dev Changes the Game Read More »

GenAI Cuts OSS Coding Time 50%—But Governance Lags | ECI Research

GenAI Cuts OSS Coding Time 50%—But Governance Lags | ECI Research

AGNTCon + MCPCon North America 2026, AI, Application Development, Automation, DevSecOps, Open Source, PyTorch Conference /

The Linux Foundation’s new study finds generative AI cuts open source coding time by up to 50%, but floods projects with low-quality AI-generated pull requests. With only 35% of projects holding a formal GenAI policy, governance has not kept pace with adoption. ECI Research breaks down what enterprise buyers and developer teams need to do about it.

GenAI Cuts OSS Coding Time 50%—But Governance Lags | ECI Research Read More »

GitLab 19.5: Building the Governed Agentic Software Factory

GitLab 19.5: Building the Governed Agentic Software Factory

AI, Application Development, Automation, DevSecOps /

GitLab 19.5 introduces MCP server integration, a job-scoped Secrets Manager, AI-powered reviewer recommendations, and a next-generation SCM architecture designed for agent-scale workloads. The release reflects a deliberate bet that governance, not raw capability, is the winning differentiator in agentic development platforms. ECI Research data on compliance friction and secrets vulnerabilities shows the market need is real.

GitLab 19.5: Building the Governed Agentic Software Factory Read More »

NeuBird Agentic Reliability Center: Governing AI in Production

NeuBird Agentic Reliability Center: Governing AI in Production

AI, Application Development, Automation, DevOps, DevSecOps, IT, Platform Engineering /

NeuBird has launched the Agentic Reliability Center, a governance platform for AI agents operating in enterprise production environments. The platform unifies telemetry access, LLM spend attribution, and versioned operational memory under a single policy-gated control plane. ECI Research data shows that agentic governance is becoming a prerequisite as AI assistance in software delivery moves from experimental to mainstream.

NeuBird Agentic Reliability Center: Governing AI in Production Read More »

Kiro Local Sandboxing: OS-Level AI Agent Security

Kiro Local Sandboxing: OS-Level AI Agent Security

Agentic AI, Application Development, DevSecOps, Platform Engineering /

Amazon’s Kiro IDE and CLI now offer local sandboxing, applying OS-level restrictions to AI agent commands without requiring cloud infrastructure. The feature unifies with Kiro’s existing permissions model and targets regulated environments where cloud sandboxing isn’t viable. ECI Research data shows compliance friction is the top blocker for AI adoption in government tech, making this a strategically timed release.

Kiro Local Sandboxing: OS-Level AI Agent Security Read More »

Open Source Summit Europe 2026: Sovereignty, Security & AI Governance

Open Source Summit Europe 2026 Wrap-Up

Cyber Security, Enterprise Software, Open Source, Open Source Summit Europe 2026 /

Open Source Summit Europe 2026 made one thing clear: open source is now a strategic foundation for enterprise AI, digital sovereignty, and software supply chain security. The challenge is that the ecosystem is innovating faster than most organizations can govern it. ECI Research examines what that means for ITDMs and developers heading into 2027.

Open Source Summit Europe 2026 Wrap-Up Read More »

Google Gemini Agent: One Platform, One Governance Stack

Google Simplifies Gemini’s Enterprise AI Strategy

AI, Application Development, Enterprise Software, Events, Gemini at Work 2026, Machine Learning /

Google has launched the Gemini agent, a single unified platform for enterprise AI execution consolidating Chat, Tasks, and Code under one governance stack. The move resolves years of product fragmentation and introduces multi-model orchestration across Gemini, Claude, and open-weight models. ECI Research data shows developer velocity and compliance friction remain the defining battlegrounds for enterprise AI adoption.

Google Simplifies Gemini’s Enterprise AI Strategy Read More »

RapidFort & SpaceWERX Target AI Software Supply Chain Security

RapidFort & SpaceWERX Target AI Software Supply Chain Security

Application Development, Cyber Security, Government Technology /

RapidFort and SpaceWERX held a national security-focused conference to address AI software supply chain vulnerabilities, agentic system risks, and post-quantum cryptography readiness. The event, grounded in a formal CRADA, signals a shift from policy discussion to operational implementation. ECI Research data shows FedRAMP compliance friction and inconsistent SBOM practices remain the biggest structural barriers to progress.

RapidFort & SpaceWERX Target AI Software Supply Chain Security Read More »

FINOS OSERA: Backport Patching for Financial Services Security

FINOS OSERA: Backport Patching for Financial Services Security

Application Development, Cyber Security, Events, FinOps, Open Source, Open Source Summit Europe 2026 /

FINOS has launched OSERA, a platform that backports security patches to the legacy open-source dependency versions large banks are actually running. Paired with a new set of remediation standards agreed upon by member institutions, OSERA addresses the gap between upstream security fixes and production reality in regulated environments. AI-enabled threat capabilities are widening that gap faster than traditional patch cycles can close it.

FINOS OSERA: Backport Patching for Financial Services Security Read More »