DevSecOps

CRA Compliance, AI Security, and Open Source Sovereignty | ECI Research

CRA Compliance, AI Security, and Open Source Sovereignty | ECI Research

AI, Application Development, Compliance, Cyber Security, Events, Open Source, Open Source Summit Europe 2026 /

OpenSSF leadership and Linux Foundation policy panelists at Open Source Summit Europe 2026 converged on three urgent themes: CRA compliance readiness is dangerously low, AI-assisted development is outpacing security governance, and Europe’s open source sovereignty gap is a services problem, not a software problem. ECI Research overlays survey data to show what this means for ITDMs and developers navigating regulated environments.

CRA Compliance, AI Security, and Open Source Sovereignty | ECI Research Read More »

AI Agent Auditability: The Enterprise Compliance Gap Argo Intelligence Is Targeting

AI Agent Auditability: The Enterprise Compliance Gap Argo Intelligence Is Targeting

Agentic AI, AI, Application Development, Compliance /

Argo Intelligence is building its enterprise AI agent platform around a verification layer that independently checks what an agent claims it did against what actually changed in live systems. The pitch targets a real procurement blocker: most AI agents produce no audit trail that legal or compliance teams will accept. ECI Research data shows FedRAMP and compliance friction is the leading blocker for AI adoption in regulated environments.

AI Agent Auditability: The Enterprise Compliance Gap Argo Intelligence Is Targeting Read More »

GitLab's Governed Software Factory: What It Means for DevSecOps

GitLab’s Governed Software Factory: What It Means for DevSecOps

Application Development, DevSecOps, Enterprise Software /

GitLab announced a connected governed software factory spanning artifact management, dependency firewall, secrets management, and AI impact analytics. The move addresses fragmented pipeline governance and rising supply chain risk from agentic development. ECI Research data shows why platform integration velocity and FedRAMP friction are the real decision drivers.

GitLab’s Governed Software Factory: What It Means for DevSecOps Read More »

LocalStack for Azure: Local Cloud Development Hits Microsoft

LocalStack for Azure: Local Cloud Development Hits Microsoft

AI, Application Development, Automation, Infrastructure /

LocalStack has launched a public beta of LocalStack for Azure, extending its local cloud development platform to Microsoft’s cloud. The product emulates Azure APIs inside a local container, letting developers and AI agents validate code without provisioning live infrastructure. As AI-generated code volumes rise, local simulation is becoming a core layer in enterprise developer platform strategy.

LocalStack for Azure: Local Cloud Development Hits Microsoft Read More »

OpenSSF, AWS, and the New Stakes of Open Source Security Compliance

OpenSSF, AWS, and the New Stakes of Open Source Security Compliance

Application Development, Compliance, Cyber Security, Events, Infrastructure, Open Source, Open Source Summit Europe 2026 /

OpenSSF announced four new members and a suite of EU Cyber Resilience Act readiness resources at Community Day Europe, while AWS elevated to Platinum membership at the Linux Foundation. Together, the moves signal enterprise consolidation around open source security governance as CRA enforcement begins and AI accelerates vulnerability discovery. ECI Research data shows significant gaps between compliance mandates and operational readiness that these initiatives directly address.

OpenSSF, AWS, and the New Stakes of Open Source Security Compliance Read More »

Kiro Workflows: Multi-Agent AI Dev Orchestration Analyzed

Kiro Workflows: Multi-Agent AI Dev Orchestration Analyzed

AI, Application Development, Enterprise Software /

Amazon’s Kiro IDE has launched workflows, a multi-agent orchestration capability that lets developers define complex software delivery tasks as reusable graphs of agent steps. Each step runs in its own isolated session, addressing the context-drift problem that plagues long agentic coding sessions. ECI Research analysts examine the architectural significance, the implications for regulated enterprise buyers, and where this fits in the evolving developer platform market.

Kiro Workflows: Multi-Agent AI Dev Orchestration Analyzed Read More »

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security

Application Security, Infrastructure /

RapidFort has listed a native integration with Wiz, surfacing its curated hardened container images and evidence-backed CVE advisories directly inside the Wiz platform. The drop-in replacement model eliminates the re-testing burden that typically blocks hardened image adoption. For ITDMs and developers alike, the integration is as much a developer velocity story as it is a security one.

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security Read More »

Dynatrace Acquires Arize: The AI Observability Platform Bet

Dynatrace Acquires Arize: The AI Observability Platform Bet

AI, Application Development, Enterprise Software, Infrastructure, Machine Learning /

Dynatrace has acquired Arize, an AI observability and LLM evaluation platform, to close the gap between pre-production AI testing and production monitoring. The deal positions Dynatrace as a full-lifecycle AI observability platform as agents proliferate across enterprise workloads. ECI Research data shows compliance friction and governance requirements make this consolidation especially valuable in regulated environments.

Dynatrace Acquires Arize: The AI Observability Platform Bet Read More »

OpenStack Hibiscus: Trusted AI Infrastructure With Confidential Compute

OpenStack Hibiscus: Trusted AI Infrastructure With Confidential Compute

AI, Application Development, Infrastructure, Machine Learning, Open Source /

OpenStack 2026.2 Hibiscus delivers confidential computing, GPU resource management, and efficiency improvements aimed squarely at AI and HPC workloads. For organizations in regulated or air-gapped environments, it makes a credible case for self-managed infrastructure as a compliance and trust strategy. ECI Research data shows why that case resonates with government and enterprise buyers.

OpenStack Hibiscus: Trusted AI Infrastructure With Confidential Compute Read More »

Codenotary AgentMon Start: AI Agent Monitoring for SMBs

Codenotary AgentMon Start: AI Agent Monitoring for SMBs

AI, Cyber Security, Machine Learning /

Codenotary has launched AgentMon Start, a purpose-built AI agent monitoring platform for small and mid-sized organizations. The product delivers behavioral visibility, token cost tracking, and governance controls across 16 agent frameworks without requiring cloud deployment or dedicated security staff. At $15 per user per month, it targets a segment that has been forced to choose between agentic AI adoption and operational oversight.

Codenotary AgentMon Start: AI Agent Monitoring for SMBs Read More »