Topic hub

DevOps & Platform Engineering

Evaluating DevOps & Platform Engineering this quarter? This page brings together what changed, which companies are most active, what practitioners are asking and how to build a shortlist.

Internal developer platforms, infrastructure as code, CI/CD and release tooling that let teams ship faster with guardrails.

What changed recently

Start with the news. These are the DevOps & Platform Engineering stories getting the most attention right now, so you know what has shifted before you talk to anyone.

Newest in the feed →
DevOps & Platform EngineeringNewWhy it matters

Secure AI agents with HashiCorp Boundary

Enable AI agents to securely access your resources while operating within enterprise identity, access, and audit controls.

Why it matters, from the Techarda editors: Most agent pilots still run on shared service credentials. Putting agents behind the same identity, session and audit controls as people is the pattern security teams will ask for before agents touch production.

HashiCorp·via HashiCorp Blog
DevOps & Platform Engineering

Terraform provider for Google Cloud 8.0 now generally available

The Terraform provider for Google Cloud 8.0 builds on expanded infrastructure discovery workflows, modernizes provider defaults, removes support for retired Google Cloud services, and improves consistency between Terraform configurations and Google Cloud APIs.

HashiCorp·via HashiCorp Blog
DevOps & Platform EngineeringWhy it matters

AI agents need continuity, not just context

Pulumi Neo works on infrastructure the way an engineer does: it clones repositories, edits files, installs dependencies, runs previews, and produces intermediate work along the way. A task is not only a conversation with a model. It is also a working directory that has to survive long enough for the agent to keep making progress. Imagine asking an agent to upgrade a Pulumi provider version across…

Pulumi·via Pulumi Blog
DevOps & Platform EngineeringHow-to

CI/CD Security Best Practices: A 2026 Pipeline Checklist

CI/CD security best practices for 2026: secrets management, scoped access, dependency scanning, signed artifacts, and audit logging in one checklist. | Blog

Harness·via Harness Blog
DevOps & Platform Engineering

AI Writes Code Fast. Can You Trust What Gets Deployed?

AI has solved writing code fast. The new bottleneck is trusting what actually reaches production. Here's what that requires. | Blog

Harness·via Harness Blog
DevOps & Platform Engineering

Best AI Security Solutions in 2026: A Buyer's Guide

Compare the best AI security solutions in 2026: LLM security, model monitoring, and AI-powered SOC tools, plus buying criteria and vendor questions. | Blog

Harness·via Harness Blog
DevOps & Platform Engineering

{unscripted} Chicago and Columbus recap

{unscripted} Chicago and Columbus focused on AI code that doesn't ship, compliance as a feature, and the human cost of machine speed. | Blog

Harness·via Harness Blog
DevOps & Platform Engineering

Git Blame Explained With Examples: Who Touched the Code?

In this post, we’ll take a look at the git blame command including how it works, how it differs from similar commands, and offer some examples.

CloudBees·via CloudBees Blog

Companies to know in DevOps & Platform Engineering

Those stories keep returning to the same names. These are the companies we track in this category; each profile has its news, solutions and published reviews.

All companies →

GitLab

San Francisco, California, USA

GitLab is a DevSecOps platform company whose single application covers source code management, CI/CD, security testing and software delivery, with AI features under GitLab Duo. Available as SaaS or self-managed and built on an open core model, it serves development and platform teams. GitLab Inc. was founded in 2014, operates all-remote and is listed on Nasdaq.

GitHub

San Francisco, California, USA

GitHub is a software development platform for hosting Git repositories and collaborating on code, used by developers, open source projects and enterprises. Its products include GitHub Actions for CI/CD, GitHub Copilot for AI-assisted coding, GitHub Advanced Security and Codespaces. Founded in 2008 and based in San Francisco, GitHub has been owned by Microsoft since 2018.

Atlassian

Atlassian is a software company founded in Sydney, Australia, in 2002 by Mike Cannon-Brookes and Scott Farquhar. It sells team collaboration and software development tools including Jira, Confluence, Jira Service Management, Bitbucket, Loom and the Rovo AI platform, delivered mainly through Atlassian Cloud. Atlassian is listed on Nasdaq and redomiciled to the United States in 2022.

JFrog

Sunnyvale, California, USA

JFrog is a software supply chain company whose JFrog Platform manages and secures software packages and binaries from development to production. Its products include JFrog Artifactory, a universal artifact repository, JFrog Xray and Advanced Security for vulnerability and licence scanning, JFrog Curation and JFrog ML. Founded in 2008 in Israel, JFrog is headquartered in Sunnyvale, California, and listed on Nasdaq.

Harness

San Francisco, California, USA

Harness is a US software delivery platform company offering AI-assisted continuous integration, continuous delivery and GitOps, feature management, cloud cost management, security testing, chaos engineering and an internal developer portal. It serves engineering and platform teams in enterprises. Founded in 2017 by Jyoti Bansal, co-founder of AppDynamics, Harness is headquartered in San Francisco and privately held.

CircleCI

San Francisco, California, USA

CircleCI is a US continuous integration and delivery (CI/CD) company founded in 2011 and headquartered in San Francisco. Its cloud and self-hosted server platform automates building, testing and deploying software, with configuration as code, orbs for reusable configuration, and support for Linux, macOS, Windows, Arm and GPU execution environments.

HashiCorp

San Francisco, California, USA

HashiCorp is a US infrastructure software company known for Terraform for infrastructure as code and Vault for secrets management, alongside Consul, Nomad, Packer, Vagrant and Boundary. It offers these through HashiCorp Cloud Platform and self-managed enterprise editions. Founded in 2012 by Mitchell Hashimoto and Armon Dadgar in San Francisco, HashiCorp was acquired by IBM in 2025.

CloudBees

CloudBees is a US software delivery company founded in 2010. It sells enterprise CI/CD and DevSecOps products built around Jenkins, including CloudBees CI and CloudBees Unify, with capabilities for release orchestration, feature management and compliance. CloudBees is a major contributor to the Jenkins open-source project and serves large enterprises with governed software delivery at scale.

Octopus Deploy

Brisbane, Queensland, Australia

Octopus Deploy is an Australian software company that makes a continuous delivery and release management platform for automating deployments and runbooks across on-premises, cloud and Kubernetes environments. Its products include Octopus Deploy, available as Octopus Cloud or self-hosted Octopus Server, and Codefresh, a GitOps platform built on Argo CD. Founded in 2012 by Paul Stovell, it is headquartered in Brisbane.

Pulumi

Seattle, Washington, USA

Pulumi is an infrastructure-as-code company headquartered in Seattle, Washington, founded in 2017 by Joe Duffy and Eric Rudder. Its open-source Pulumi IaC tool lets engineers define cloud infrastructure in general-purpose languages such as TypeScript, Python, Go, C# and Java. The commercial Pulumi Cloud adds state management, policy, secrets management (Pulumi ESC) and platform engineering features.

Buildkite

Buildkite is a software delivery platform company founded in Melbourne, Australia, in 2013. Its hybrid CI/CD platform runs pipelines on agents hosted in customers' own infrastructure or on Buildkite-hosted agents, and its product suite includes Pipelines, Test Engine and Package Registries. It is used by engineering teams that need to run large, fast and secure builds.

LaunchDarkly

Oakland, California, USA

LaunchDarkly is a feature management and experimentation platform that lets software teams release features behind feature flags, roll out changes progressively, run experiments and roll back without redeploying code. It provides SDKs for major languages and serves engineering and product teams at enterprises and software companies. Founded in 2014 by Edith Harbaugh and John Kodumal, it is headquartered in Oakland, California.

Spacelift

Spacelift is an infrastructure-as-code orchestration platform used by platform engineering and DevOps teams to automate, govern and audit infrastructure workflows. It supports Terraform, OpenTofu, Pulumi, AWS CloudFormation, Ansible and Kubernetes, with policy-as-code, drift detection and self-service provisioning. Spacelift is a privately held, venture-backed company and a founding supporter of the OpenTofu project.

env zero

env zero, formerly env0, is an infrastructure-as-code automation, governance and cloud asset management platform for platform engineering and DevOps teams. It manages Terraform, OpenTofu, Pulumi, CloudFormation and other IaC workflows with self-service environments, policy as code, cost controls and drift detection, and added cloud asset inventory through its March 2026 merger with CloudQuery. env zero is privately held.

Humanitec

Berlin, Germany

Humanitec is a Berlin-based platform engineering company that provides the Humanitec Platform Orchestrator, a backend for building internal developer platforms that standardises how applications and infrastructure are configured and deployed. It created Score, an open source workload specification, and organises PlatformCon, a platform engineering conference. Humanitec serves enterprise platform teams and is privately held.

Port

Port is a software company that makes an internal developer portal for platform engineering teams. Its product combines a software catalogue, self-service actions, scorecards and dashboards so developers can find services, provision resources and follow engineering standards. Port was founded in 2022 by Zohar Einy and Yonatan Boguslavski and has roots in Israel.

Cortex

San Francisco, California, USA

Cortex is an internal developer portal company founded in 2019 and based in San Francisco. Its platform catalogues an organisation's services, owners and dependencies, and uses scorecards, initiatives and workflows to track engineering standards such as production readiness, security and reliability. Cortex serves platform engineering and developer experience teams and is a privately held, venture-backed company that went through Y Combinator.

Perforce

Minneapolis, Minnesota, USA

Perforce is a DevOps software company offering version control, infrastructure automation, testing, static analysis and test data management tools. Its portfolio includes P4 (formerly Helix Core) version control, Puppet, Delphix, BlazeMeter, Perfecto, Klocwork and Helix ALM, used heavily in game development, embedded and regulated industries. Founded in 1995 by Christopher Seiwald, Perforce is privately owned by Clearlake Capital and Francisco Partners and headquartered in Minneapolis.

Progress Software

Burlington, Massachusetts, USA

Progress Software is a US software company headquartered in Burlington, Massachusetts, founded in 1981. It sells infrastructure and application development software including the Chef DevOps automation suite, OpenEdge, Telerik and Kendo UI developer tools, MOVEit managed file transfer, Sitefinity, MarkLogic and ShareFile. Progress is listed on Nasdaq and grows substantially through acquisitions of established software products.

Sonatype

Fulton, Maryland, USA

Sonatype is a US software supply chain security company founded in 2008 and based in Fulton, Maryland. It develops Nexus Repository, a widely used artifact repository manager, and the Sonatype Lifecycle, Firewall and SBOM Manager products for open source governance and dependency risk. Sonatype is the steward of Maven Central, the main public repository for Java components.

What practitioners are asking

Vendor news only tells you half of it. This is what people working in DevOps & Platform Engineering are discussing and asking each other.

Open the space →

Build a shortlist

With the news, the companies and the open questions in view, pick three to five companies whose products match your problem, read their recent stories and put your remaining questions to the community before you speak to sales.

More DevOps & Platform Engineering stories

If you want more background, here is more of the recent coverage.

All in the feed →
DevOps & Platform Engineering

Configuration as Code: Everything You Need to Know

Streamline your application management using Configuration as Code. Learn how CaC can save time, enhance flexibility, and improve system uptime.

CloudBees·via CloudBees Blog
DevOps & Platform Engineering

Baking Security into Your Software Delivery Pipeline

Baking Security into Your Software Delivery Pipeline

CloudBees·via CloudBees Blog
DevOps & Platform Engineering

Parallelism and Distributed Builds with Jenkins

Maximize your CI/CD efficiency with Jenkins parallelism. Learn to optimize pipelines, speed up builds, and enhance resource utilization. Try it now!

CloudBees·via CloudBees Blog
DevOps & Platform Engineering

What Does Tessl Do? Key Features and Where It Fits

What Tessl does for AI agent skills, what it doesn't solve, and where Port fits in, whether you run Tessl alone, Port alone, or both.

Port·via Port Blog
DevOps & Platform Engineering

The New Engineering Problem: Managing What AI Decides to Import

AI makes it faster to turn an idea into working software. A developer describes a feature, integration, or service and receives an implementation in minutes. Coding agents go further by editing files, running tests, troubleshooting failures, and preparing changes for review.

Sonatype·via Sonatype Blog
DevOps & Platform EngineeringHow-to

How to Audit Cloud Spend When You Inherit a New Environment

A practical guide to auditing cloud spend when you inherit a new environment: find waste, attribute costs, detect drift, and prevent overspend.

Spacelift·via Spacelift Blog
DevOps & Platform Engineering

Cloud Cost Optimization Strategies for 2026 to Reduce Spend

Learn how to allocate cloud spend, rightsize Kubernetes safely, stop idle resources, manage commitments, and prevent cost spikes without risking reliability. | Blog

Harness·via Harness Blog
DevOps & Platform EngineeringHow-to

How to improve agent experience (AX) with CI

CircleCI·via CircleCI Blog
DevOps & Platform Engineering

What the EU AI Act means for AI governance

Teams shipping AI in the EU must be able to demonstrate compliance. Here's how LaunchDarkly helps.

LaunchDarkly·via LaunchDarkly Blog
DevOps & Platform Engineering

GitHub External Custom Properties: Sync Business Context | Port

Sync Port's business context into GitHub external custom properties to search, govern, and set ruleset guardrails on your repos.

Port·via Port Blog
DevOps & Platform Engineering

What's New in Port: August 2026 Release Notes

August brings Port Workflows to General Availability (GA) as the governed orchestration layer for agents, automations, and approvals, alongside new Cursor Cloud Agent syncing and triggering directly from workflows and a wave of workflow, integration, and governance improvements rounds out the month.

Port·via Port Blog
DevOps & Platform Engineering

Take AI Agents from Demo to Production with Port AI Builder

Why most AI agents stall before production, the five things that get them there, and how Port AI Builder builds them from a plain-language prompt.

Port·via Port Blog
DevOps & Platform Engineering

Plugins Library: Ready-Made Plugins for Platform Teams

The Plugins Library brings ready-made plugins into Port: DORA dashboards, dependency trees, scorecard views, calendar, surveys, and more.

Port·via Port Blog
DevOps & Platform Engineering

GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7

GitLab·via GitLab Blog
DevOps & Platform Engineering

A faster, more reliable GitHub Actions alternative: Run Actions on CircleCI

CircleCI·via CircleCI Blog
DevOps & Platform EngineeringHow-to

Top AI Infrastructure Tools and How to Choose the Right One

Learn what AI infrastructure tools are, the main categories, top examples, and how to choose the right ones for your workloads.

Spacelift·via Spacelift Blog