DevSecOps

Crogl's Sovereign AI SOC Agent: Free, On-Prem, No Strings

Crogl’s Sovereign AI SOC Agent

AI/ML, Application Development, Application Security, DevSecOps /

Crogl has released its Enterprise AI SOC Agent as a free download, deployable in minutes within a customer’s own environment including air-gapped networks. The platform automates alert investigation and threat hunting without moving data outside the customer’s perimeter. ECI Research data on constrained engineering capacity and AI-generated security risk helps explain why this architecture is hitting the market at the right moment.

Crogl’s Sovereign AI SOC Agent Read More »

Codenotary Uses Claude AI to Secure immudb Development

Codenotary Uses Claude AI to Secure immudb Development

AI, Application Development, DevOps, DevSecOps, Open Source, Programming, Software Development /

Codenotary has been accepted into Anthropic’s Claude for OSS program, deploying AI assistance to accelerate development of immudb, its open source immutable database. The company is using Claude to detect subtle bugs, analyze concurrency issues, and generate regression tests, while maintaining mandatory human review of all code changes. The move positions Codenotary to ship faster at a moment when enterprise demand for software supply chain security infrastructure is near peak.

Codenotary Uses Claude AI to Secure immudb Development Read More »

Acalvio Deception Guardrails: Securing Agentic AI at Runtime

Acalvio Deception Guardrails are Securing Agentic AI at Runtime

Agentic AI, AI, AI/ML, Application Development, DevSecOps, Security /

Acalvio Technologies has launched Deception Guardrails, a capability that embeds deceptive honeytokens, decoy MCP servers, and fake credentials into AI agent workflows to detect compromise before enterprise systems are impacted. As agentic AI deployments scale, traditional input/output guardrails leave a critical detection gap that deception technology is well positioned to fill. This note examines the product logic, the security risk context, and what it means for ITDMs and developers building production AI agent infrastructure.

Acalvio Deception Guardrails are Securing Agentic AI at Runtime Read More »

EU AI Act Delay Widens the AI Insurance Coverage Gap

EU AI Act Delay Widens the AI Insurance Coverage Gap

AI Governance, Application Development, Compliance, Enterprise Software /

The EU granted a 16-month extension on AI Act high-risk obligations, but insurers are moving the other way, filing generative AI exclusions into D&O and E&O policies. The gap between regulatory runway and insurance coverage is now a hard business risk. Organizations that treat the extension as a reason to slow governance investment may find themselves underinsured today, not in 2027.

EU AI Act Delay Widens the AI Insurance Coverage Gap Read More »

Enterprise AI ROI Gap: Why Productivity Gains Vanish at Scale

Enterprise AI ROI Gap: Why Productivity Gains Vanish at Scale

AI, Application Development, Enterprise Software, Machine Learning /

Enterprise AI is making individual contributors faster while leaving organizational returns largely unchanged. The cause is structural: AI was layered onto inherited processes that were never redesigned to benefit from acceleration. ECI Research data on engineering time allocation and AI security risk illuminates why the productivity gains are disappearing before they reach the balance sheet.

Enterprise AI ROI Gap: Why Productivity Gains Vanish at Scale Read More »

EU AI Act Deadline: Why AI Governance Is Now a Global Enterprise Issue

EU AI Act Deadline: Why AI Governance Is Now a Global Enterprise Issue

AI, AI/ML, AIOps, Application Development, DevSecOps /

The EU AI Act’s August 2 transparency deadline is closer than most North American enterprises realize. Cinchy CEO J. Paul Haynes argues the real challenge isn’t disclosure — it’s continuous operational oversight of AI in production. ECI Research data shows why engineering capacity and security risk make this a board-level conversation.

EU AI Act Deadline: Why AI Governance Is Now a Global Enterprise Issue Read More »

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Application Development, Compliance, Open Source, Security /

The Eclipse Foundation and OWASP have signed an MOU to strengthen open source security and support EU Cyber Resilience Act compliance. With mandatory reporting obligations taking effect September 11, 2026, the partnership targets SBOM adoption, supply chain security, and maintainer readiness. ECI Research data shows supply chain security is a top-12-month investment priority for nearly half of enterprise respondents.

Eclipse Foundation & OWASP Unite for CRA Open Source Security Read More »

Conifers Resilient Cyber Defense: The AI SOC Built for Frontier Models

Conifers Resilient Cyber Defense: The AI SOC Built for Frontier Models

Agentic AI, AI, Application Development, DevSecOps, Security /

Conifers has introduced Resilient Cyber Defense, an agentic AI SOC platform that connects threat intelligence, detection engineering, and remediation into a single governed operating loop. The platform claims 99%+ accuracy across nearly 500,000 investigations and reduced median detection-to-containment time to under ten minutes in production. ECI Research data shows AI-assisted development has increased security risk for over 60% of practitioners, making this launch timely.

Conifers Resilient Cyber Defense: The AI SOC Built for Frontier Models Read More »

NVIDIA Vera Rubin: Intelligence per Dollar Redefines AI Infrastructure

NVIDIA Vera Rubin: Intelligence per Dollar Redefines AI Infrastructure

Agentic AI, AI, AI Governance, AIOps, Application Development, DevSecOps /

NVIDIA’s July 2026 announcements center on Vera Rubin’s “intelligence per dollar” positioning, the formation of the Open Secure AI Alliance, and a global wave of AI factory partnerships. The moves signal a strategic shift from chip performance to full-stack AI economics and trust. For enterprise buyers, the implications span procurement, governance, and long-term platform strategy.

NVIDIA Vera Rubin: Intelligence per Dollar Redefines AI Infrastructure Read More »

AI Agent Governance: What Two Incidents Reveal About Enterprise Risk

AI Agent Governance: What Two Incidents Reveal About Enterprise Risk

Agentic AI, AI, AI Governance, AI/ML, Application Development, DevSecOps, Security /

A Claude data-sharing exposure and an OpenAI agent sandbox breach look different on the surface, but both reveal the same enterprise blind spot: organizations lack visibility into where their AI systems’ authority actually ends. ECI Research analyst coverage examines the governance gap and what enterprises should do about it.

AI Agent Governance: What Two Incidents Reveal About Enterprise Risk Read More »