Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

AI Can't Prove Compliance by Itself

Jan 23, 2026 By Kosli In Kosli
AI is moving fast, and it’s tempting to believe it can automate software governance end to end. But compliance and security aren’t probabilistic problems. They don’t accept “close enough.” They don’t accept summaries. They can’t tolerate hallucinations. Governance depends on facts. Irrefutable, provable evidence of how systems actually changed.
View Video

Governance Doesn't Stop at Deploy

Jan 23, 2026 By Kosli In Kosli
Most governance models focus on what happens before production. Approvals. Tickets. Change records. But software delivery doesn’t end at deploy. Runtime is where change management is validated. It’s where systems prove whether controls actually work and where risk becomes real. If governance stops at deployment, you’re not managing change. You’re managing intent. In this video, Mike Long (CEO & Co-founder, Kosli) explains why runtime is the true source of control, why approvals alone don’t reduce risk, and how modern teams build governance that reflects reality, not paperwork.
View Video
How Does Website Infrastructure Impact Operational Efficiency in Growing Teams?

How Does Website Infrastructure Impact Operational Efficiency in Growing Teams?

Jan 23, 2026 By OpsMatters In OpsMatters
Growing teams don't struggle because of big strategic questions first. They stumble on slow dashboards, broken logins, and sites that freeze during peak traffic. Website infrastructure either clears the runway or scatters debris across it. When systems respond fast, teams ship faster, support fewer fires, and argue less about whose tool failed. Poor infrastructure does the opposite. It multiplies tickets, adds delays, and burns morale. The pattern shows up in every scale-up: technology either amplifies discipline or exposes chaos instantly, sometimes in a single intense quarter of growth.
Read Post

How to Use the Secure Vault in Uptime.com

Jan 22, 2026 By Uptime Website Monitoring In uptime
In this tutorial, we explore Uptime.com's Secure Vault and how to securely create, edit, and manage your credentials. Learn how to access the Vault, add new Vault Items including Username/Password pairs, Certificates, Single Secret Tokens, and Time-based One-Time Passwords (TOTP), and use them in HTTP(S), API, Transaction, and Page Speed checks. Discover enhanced security features, including 256-bit AES-GCM encryption and zero-trust credential storage. We also cover REST API integration, variable usage, and user permissions.
View Video
certkit

Certificate permissions with CertKit Applications

Jan 21, 2026 By Todd H. Gardner In CertKit
When you’re managing a handful of certificates, one big list works fine. Add a few dozen more and things get messy. Add multiple teams or projects and you’ve got a problem. Who should have access to the production certificates? What about staging? Does the contractor working on the marketing site really need to see your internal infrastructure? CertKit now supports multiple applications from our roadmap to help you sort this out.
Read Post
Top API Auth Mistakes (JWT, OAuth, keys)

Top API Auth Mistakes (JWT, OAuth, keys)

Jan 21, 2026 By OpsMatters In OpsMatters
APIs are the connective tissue of the modern digital world. They power our mobile apps, enable microservices to communicate, and connect us to third-party data. But this central role also makes them a prime target for attackers. While we build powerful functionalities, it's often the simplest oversights in authentication that leave the front door wide open.
Read Post
tigera

Ingress NGINX Project Is Retiring: A Step-by-Step Guide to Replacing the Ingress NGINX Controller

Jan 20, 2026 By Tigera Team In Tigera
The Ingress NGINX Controller is approaching retirement, and teams need a clear path forward to manage Kubernetes ingress traffic securely and reliably. To make this transition easier, we’ve created a single, curated hub with all the relevant blogs and webinars. This hub serves as your one-stop resource for understanding the migration to Kubernetes Gateway API with Calico Ingress Gateway.
Read Post
kosli

ServiceNow Without the Ticket Hell

Jan 20, 2026 By Bruce Johnston In Kosli
ServiceNow is the system of record for change and approvals in most regulated enterprises. And yet, for many teams, it has become the place where delivery slows to a crawl. Not because ServiceNow is broken. But because the evidence model underneath it is. Developers ship fast through modern CI/CD pipelines, automated tests, and security scans, only to hit a wall when changes reach approval. Tickets bounce back. Evidence is questioned. Screenshots do not tell the full story. CABs hesitate. Releases wait.
Read Post
kosli

Evidence, Not Screenshots. How Teams Stay Always Audit-Ready in ServiceNow

Jan 20, 2026 By Bruce Johnston In Kosli
In regulated environments, slow change is often blamed on process. Too many approvals. Too much governance. Too much red tape. But in reality, most delays are not caused by regulation itself. They are caused by missing, fragmented, or untrusted evidence. Screenshots pasted into tickets. Proof assembled weeks later. Approvals stalled because no one can confidently say whether a change actually meets policy. When evidence is an afterthought, compliance turns into chaos.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.