a Futurum companyTag
33 articles
AI
The control that held your infrastructure together was plan review, meaning a person reading a diff and deciding whether to approve it. Not the policy document and not the pipeline configuration. It worked because change arrived a…
Showing 1–24 of 33
AI
AI-generated infrastructure code is exposing a growing security gap, pushing platform teams to add stronger automated gates, provenance tracking and human review before Terraform,…
AI
When agents write code and open pull requests faster than humans can read them, ‘the diff looked fine’ stops being a control. The durable controls live outside the agent’s reasonin…
AI
AI agents now generate infrastructure code at scale, but security pass rates are stuck at 55%. Here’s how teams can close the governance gap.
AI
A developer pulls a package from a reliable repo. It is signed, has provenance, and has been scanned. And then…it contains malware. That is no longer hypothetical. When the Miasma…
Blogs
HashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks.
Blogs
Artificial Intelligence is pushing DevSecOps into a new phase where security is no longer just about detecting vulnerabilities, but increasingly about resolving them automatically…
Blogs
Not every infrastructure pull request deserves the same review path. A tag change in a development account and a network-policy change in production should not create identical rev…
Blogs
Stop firefighting cloud costs weeks after deployment. Learn how to “shift cost left” by integrating cost estimates and policy-as-code directly into your DevOps workflows using tool…
AI
There was a time when compliance meant a quarterly ritual. Someone from security would walk over with a spreadsheet, ask a few questions, tick a few boxes and disappear until the n…
Blogs
Explore why 80% of organizations are adopting Internal Developer Platforms (IDPs) by 2026. From reducing setup time by 40% to mitigating $9,000-per-minute downtime costs, discover…
Blogs
Policy as code can do more than enforce compliance. Learn how platform teams use guardrails, tagging and sizing policies to prevent cloud cost waste early.
Blogs
Learn how Open Policy Agent (OPA) transformed go/no-go releases from subjective meetings into automated, auditable, policy-driven decisions embedded directly in the CI/CD pipeline.
Blogs
Traditional CI/CD pipelines hit scaling limits. Learn how GitOps improves deployment reliability, security, and DORA metrics—and what it takes to migrate successfully.
Blogs
Open Policy Agent (OPA) is a versatile policy engine designed to handle policy enforcement across cloud infrastructures. It enables users to define and apply policies consistently…
Blogs
A deep dive into scaling GitOps for hybrid and multi-cloud environments, exploring architecture, governance, security, observability and real-world enterprise practices.
Blogs
Learn the top five Infrastructure as Code (IaC) security vulnerabilities, their fixes, and best practices to prevent misconfigurations, drifts, and breaches.
Blogs
Env Zero (formerly env0) has revamped its Cloud Governance Platform with AI and MCP support, including a new Static Code Analyzer Agent to streamline IaC governance, compliance, an…
Blogs
DevOps has transformed how developers build, deploy, and manage infrastructure and applications, making automation, scalability and rapid iteration core to modern development workf…
Blogs
How DevOps teams can embed auditability without sacrificing delivery speed.
AI
Organizations should start embedding PaC into their AI workflows today. Tools and emerging AI-focused platforms are the first line of defense in the automated future.
Best of 2024
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools.
Blogs
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools.
Blogs
Red Hat is previewing a policy-as-code capability for the Ansible Automation Platform that promises to make it simpler to apply and enforce governance and compliance policies. Demo…
