How are you measuring platform engineering success?
DORA metrics, developer surveys, time-to-first-deploy, cost per service? What convinced leadership the platform team is worth it?
Evaluating DevOps & Platform Engineering this quarter? This page brings together what changed, which companies are most active, what practitioners are asking and how to build a shortlist.
Internal developer platforms, infrastructure as code, CI/CD and release tooling that let teams ship faster with guardrails.
Start with the news. These are the DevOps & Platform Engineering stories getting the most attention right now, so you know what has shifted before you talk to anyone.
Enable AI agents to securely access your resources while operating within enterprise identity, access, and audit controls.
Why it matters, from the Techarda editors: Most agent pilots still run on shared service credentials. Putting agents behind the same identity, session and audit controls as people is the pattern security teams will ask for before agents touch production.
The Terraform provider for Google Cloud 8.0 builds on expanded infrastructure discovery workflows, modernizes provider defaults, removes support for retired Google Cloud services, and improves consistency between Terraform configurations and Google Cloud APIs.
Pulumi Neo works on infrastructure the way an engineer does: it clones repositories, edits files, installs dependencies, runs previews, and produces intermediate work along the way. A task is not only a conversation with a model. It is also a working directory that has to survive long enough for the agent to keep making progress. Imagine asking an agent to upgrade a Pulumi provider version across…
CI/CD security best practices for 2026: secrets management, scoped access, dependency scanning, signed artifacts, and audit logging in one checklist. | Blog
AI has solved writing code fast. The new bottleneck is trusting what actually reaches production. Here's what that requires. | Blog
Compare the best AI security solutions in 2026: LLM security, model monitoring, and AI-powered SOC tools, plus buying criteria and vendor questions. | Blog
{unscripted} Chicago and Columbus focused on AI code that doesn't ship, compliance as a feature, and the human cost of machine speed. | Blog
In this post, we’ll take a look at the git blame command including how it works, how it differs from similar commands, and offer some examples.
Those stories keep returning to the same names. These are the companies we track in this category; each profile has its news, solutions and published reviews.
GitLab is a DevSecOps platform company whose single application covers source code management, CI/CD, security testing and software delivery, with AI features under GitLab Duo. Available as SaaS or self-managed and built on an open core model, it serves development and platform teams. GitLab Inc. was founded in 2014, operates all-remote and is listed on Nasdaq.
GitHub is a software development platform for hosting Git repositories and collaborating on code, used by developers, open source projects and enterprises. Its products include GitHub Actions for CI/CD, GitHub Copilot for AI-assisted coding, GitHub Advanced Security and Codespaces. Founded in 2008 and based in San Francisco, GitHub has been owned by Microsoft since 2018.
Atlassian is a software company founded in Sydney, Australia, in 2002 by Mike Cannon-Brookes and Scott Farquhar. It sells team collaboration and software development tools including Jira, Confluence, Jira Service Management, Bitbucket, Loom and the Rovo AI platform, delivered mainly through Atlassian Cloud. Atlassian is listed on Nasdaq and redomiciled to the United States in 2022.
JFrog is a software supply chain company whose JFrog Platform manages and secures software packages and binaries from development to production. Its products include JFrog Artifactory, a universal artifact repository, JFrog Xray and Advanced Security for vulnerability and licence scanning, JFrog Curation and JFrog ML. Founded in 2008 in Israel, JFrog is headquartered in Sunnyvale, California, and listed on Nasdaq.
Harness is a US software delivery platform company offering AI-assisted continuous integration, continuous delivery and GitOps, feature management, cloud cost management, security testing, chaos engineering and an internal developer portal. It serves engineering and platform teams in enterprises. Founded in 2017 by Jyoti Bansal, co-founder of AppDynamics, Harness is headquartered in San Francisco and privately held.
CircleCI is a US continuous integration and delivery (CI/CD) company founded in 2011 and headquartered in San Francisco. Its cloud and self-hosted server platform automates building, testing and deploying software, with configuration as code, orbs for reusable configuration, and support for Linux, macOS, Windows, Arm and GPU execution environments.
HashiCorp is a US infrastructure software company known for Terraform for infrastructure as code and Vault for secrets management, alongside Consul, Nomad, Packer, Vagrant and Boundary. It offers these through HashiCorp Cloud Platform and self-managed enterprise editions. Founded in 2012 by Mitchell Hashimoto and Armon Dadgar in San Francisco, HashiCorp was acquired by IBM in 2025.
CloudBees is a US software delivery company founded in 2010. It sells enterprise CI/CD and DevSecOps products built around Jenkins, including CloudBees CI and CloudBees Unify, with capabilities for release orchestration, feature management and compliance. CloudBees is a major contributor to the Jenkins open-source project and serves large enterprises with governed software delivery at scale.
Octopus Deploy is an Australian software company that makes a continuous delivery and release management platform for automating deployments and runbooks across on-premises, cloud and Kubernetes environments. Its products include Octopus Deploy, available as Octopus Cloud or self-hosted Octopus Server, and Codefresh, a GitOps platform built on Argo CD. Founded in 2012 by Paul Stovell, it is headquartered in Brisbane.
Pulumi is an infrastructure-as-code company headquartered in Seattle, Washington, founded in 2017 by Joe Duffy and Eric Rudder. Its open-source Pulumi IaC tool lets engineers define cloud infrastructure in general-purpose languages such as TypeScript, Python, Go, C# and Java. The commercial Pulumi Cloud adds state management, policy, secrets management (Pulumi ESC) and platform engineering features.
Buildkite is a software delivery platform company founded in Melbourne, Australia, in 2013. Its hybrid CI/CD platform runs pipelines on agents hosted in customers' own infrastructure or on Buildkite-hosted agents, and its product suite includes Pipelines, Test Engine and Package Registries. It is used by engineering teams that need to run large, fast and secure builds.
LaunchDarkly is a feature management and experimentation platform that lets software teams release features behind feature flags, roll out changes progressively, run experiments and roll back without redeploying code. It provides SDKs for major languages and serves engineering and product teams at enterprises and software companies. Founded in 2014 by Edith Harbaugh and John Kodumal, it is headquartered in Oakland, California.
Spacelift is an infrastructure-as-code orchestration platform used by platform engineering and DevOps teams to automate, govern and audit infrastructure workflows. It supports Terraform, OpenTofu, Pulumi, AWS CloudFormation, Ansible and Kubernetes, with policy-as-code, drift detection and self-service provisioning. Spacelift is a privately held, venture-backed company and a founding supporter of the OpenTofu project.
env zero, formerly env0, is an infrastructure-as-code automation, governance and cloud asset management platform for platform engineering and DevOps teams. It manages Terraform, OpenTofu, Pulumi, CloudFormation and other IaC workflows with self-service environments, policy as code, cost controls and drift detection, and added cloud asset inventory through its March 2026 merger with CloudQuery. env zero is privately held.
Humanitec is a Berlin-based platform engineering company that provides the Humanitec Platform Orchestrator, a backend for building internal developer platforms that standardises how applications and infrastructure are configured and deployed. It created Score, an open source workload specification, and organises PlatformCon, a platform engineering conference. Humanitec serves enterprise platform teams and is privately held.
Port is a software company that makes an internal developer portal for platform engineering teams. Its product combines a software catalogue, self-service actions, scorecards and dashboards so developers can find services, provision resources and follow engineering standards. Port was founded in 2022 by Zohar Einy and Yonatan Boguslavski and has roots in Israel.
Cortex is an internal developer portal company founded in 2019 and based in San Francisco. Its platform catalogues an organisation's services, owners and dependencies, and uses scorecards, initiatives and workflows to track engineering standards such as production readiness, security and reliability. Cortex serves platform engineering and developer experience teams and is a privately held, venture-backed company that went through Y Combinator.
Perforce is a DevOps software company offering version control, infrastructure automation, testing, static analysis and test data management tools. Its portfolio includes P4 (formerly Helix Core) version control, Puppet, Delphix, BlazeMeter, Perfecto, Klocwork and Helix ALM, used heavily in game development, embedded and regulated industries. Founded in 1995 by Christopher Seiwald, Perforce is privately owned by Clearlake Capital and Francisco Partners and headquartered in Minneapolis.
Progress Software is a US software company headquartered in Burlington, Massachusetts, founded in 1981. It sells infrastructure and application development software including the Chef DevOps automation suite, OpenEdge, Telerik and Kendo UI developer tools, MOVEit managed file transfer, Sitefinity, MarkLogic and ShareFile. Progress is listed on Nasdaq and grows substantially through acquisitions of established software products.
Sonatype is a US software supply chain security company founded in 2008 and based in Fulton, Maryland. It develops Nexus Repository, a widely used artifact repository manager, and the Sonatype Lifecycle, Firewall and SBOM Manager products for open source governance and dependency risk. Sonatype is the steward of Maven Central, the main public repository for Java components.
Vendor news only tells you half of it. This is what people working in DevOps & Platform Engineering are discussing and asking each other.
DORA metrics, developer surveys, time-to-first-deploy, cost per service? What convinced leadership the platform team is worth it?
Golden paths, templates, portals, self-service environments. Which parts get used every day and which became shelfware?
With the news, the companies and the open questions in view, pick three to five companies whose products match your problem, read their recent stories and put your remaining questions to the community before you speak to sales.
If you want more background, here is more of the recent coverage.
Streamline your application management using Configuration as Code. Learn how CaC can save time, enhance flexibility, and improve system uptime.
Baking Security into Your Software Delivery Pipeline
Maximize your CI/CD efficiency with Jenkins parallelism. Learn to optimize pipelines, speed up builds, and enhance resource utilization. Try it now!
What Tessl does for AI agent skills, what it doesn't solve, and where Port fits in, whether you run Tessl alone, Port alone, or both.
AI makes it faster to turn an idea into working software. A developer describes a feature, integration, or service and receives an implementation in minutes. Coding agents go further by editing files, running tests, troubleshooting failures, and preparing changes for review.
A practical guide to auditing cloud spend when you inherit a new environment: find waste, attribute costs, detect drift, and prevent overspend.
Learn how to allocate cloud spend, rightsize Kubernetes safely, stop idle resources, manage commitments, and prevent cost spikes without risking reliability. | Blog
Teams shipping AI in the EU must be able to demonstrate compliance. Here's how LaunchDarkly helps.
Sync Port's business context into GitHub external custom properties to search, govern, and set ruleset guardrails on your repos.
August brings Port Workflows to General Availability (GA) as the governed orchestration layer for agents, automations, and approvals, alongside new Cursor Cloud Agent syncing and triggering directly from workflows and a wave of workflow, integration, and governance improvements rounds out the month.
Why most AI agents stall before production, the five things that get them there, and how Port AI Builder builds them from a plain-language prompt.
The Plugins Library brings ready-made plugins into Port: DORA dashboards, dependency trees, scorecard views, calendar, surveys, and more.
Learn what AI infrastructure tools are, the main categories, top examples, and how to choose the right ones for your workloads.