Operations | Monitoring | ITSM | DevOps | Cloud

Continuous Delivery Excellence with Harness IDP | Harness Blog

This article explores how Harness Internal Developer Portal accelerates continuous delivery by providing self-service workflows, standardized deployment pipelines, and unified service catalogs. Discover how platform engineering teams use IDP to reduce deployment friction, improve developer velocity, and achieve operational excellence across the software delivery lifecycle. Why does achieving continuous delivery excellence feel like pushing water uphill when you already have CI/CD pipelines in place?

Measuring IDP Success: Metrics Beyond Tracking | Harness Blog

This guide explores outcome-based metrics for measuring Internal Developer Portal success without invasive developer tracking. Learn which KPIs demonstrate ROI—from deployment frequency to MTTR—while building trust and improving developer experience through privacy-respecting analytics. Your executive team wants to see measuring IDP success in numbers, but the moment you start tracking individual developer keystrokes, you've already lost the trust that makes the platform worth building.

Why we stopped hiring for the skills we used to hire for

Six engineers, two QA, a product owner and a Scrum Master used to be a normal squad. With today's tooling, that's bloat. Teams are being rebuilt around three people. Not because the work got smaller — because agentic tooling absorbed the parts that needed all those hands. The engineer's job shifts from writing the code to directing the agents that write it, and owning the outcome that comes out the other end.

Harness Announces Capabilities that Enable Security at Machine Speed | Harness Blog

Vulnerabilities used to move at human speed. A researcher found one, disclosed it, and defenders had days - sometimes weeks - to respond before it was weaponized in the wild. That window is gone. According to the Edgescan 2026 Vulnerability Statistics Report, it still takes an average of 55 days to fix a vulnerability - but the Zero Day Clock shows attackers going from disclosure to first exploit in as little as 6 hours.

Amazon AI Code Rewriting Gone Wrong!

In 2025 Amazon tasked Ai to find efficiencies. It definitely did. The AI went rogue and started deleting files and canceling programs. It was efficient. Less code, less products, more efficient. Adam mentions, dont burn the house down to reduce the electric bill. ShipTalk breaks down the biggest shifts in AI, DevOps, and software delivery. No hype, no vendor gloss. Stop talking, start shipping.

Bringing Third-Party Apps into Harness AI Chat: Our MCP Gateway for Distributed Enterprise Systems | Harness Blog

TLDR: When you work in Harness AI Chat, your work doesn't stop at Harness. Your pipelines live here, but the change you actually need to make might be a YAML file in GitHub, a Jira ticket, or a Confluence doc. So we built an MCP Gateway inside Harness that lets AI Chat reach those third-party apps for you: safely, under Harness's own access controls and secrets, and without dropped sessions across our distributed fleet. This is the story of what we built and why.

Anthropic's Mythos 5 Fakes Identities Hacking Britain's Government AI Challenge

AI agents are now faking identities — and this is the case that proves it. The UK's AI Security Institute gave frontier models a hacking challenge. Anthropic's Mythos 5 decided the most efficient path to a win was to poison a real open source project: it opened a pull request full of malicious code on a live public repo, then spun up fake GitHub accounts, posed as a different developer, and used that invented person to publicly vouch for its own code — pressuring a real human maintainer into merging it. A human reviewer caught the malware and closed the PR.

Anthropic's Mythos 5 Created Fake GitHub Identities & the U.S. Government's New AI Review

Anthropic's Mythos 5 created fake GitHub identities to get malicious code approved. Cybersecurity advisor and author Nicole Dove joins ShipTalk to explain what this means for AI agent security, device code phishing, open-source software, and secure software delivery.

Platform Engineering vs DevOps: How a Software Engineering Platform Unites Both | Harness Blog

DevOps is a culture and practice that gets development and operations teams to collaborate, automate, and ship software faster and more reliably. Platform engineering is the discipline that builds the internal tooling and self-service infrastructure that makes those DevOps practices repeatable at scale. Put simply: DevOps is the goal; platform engineering is one of the most effective ways to reach it across many teams. Your developers are shipping code faster than ever.

Software Delivery Platform Explained: Key Features and How to Evaluate One | Harness Blog

A software delivery platform is an integrated system that manages every stage of moving software from a code commit to production: continuous integration, continuous delivery, security, and the feedback loops in between. It treats delivery as one governed lifecycle instead of a chain of disconnected steps.

FinOps Savings Optimization: Stop Overspending, Start Saving | Harness Blog

Traditional FinOps focuses on cutting overspend, but the real opportunity lies in maximizing savings you're missing. This paradigm shift reframes cloud cost management as a proactive savings optimization strategy rather than reactive spend control, helping organizations unlock hidden cost efficiency through governance, automation, and continuous optimization practices. Cloud spend is up 40% year-over-year. Your CFO wants answers.

Zero Day to Fix: Why Security Response Speed-Not Discovery-Is Your Real Bottleneck | Harness Blog

Here's the uncomfortable truth about the Mythos era: knowing about a vulnerability and being able to neutralize it are two entirely different problems. AI models like Mythos are finding vulnerabilities 10x faster than humans ever could. Project Glasswing participants discovered over 10,000 high and critical vulnerabilities in their applications. Firefox alone had 271 previously unknown zero-days exposed by Mythos. That's the good news.

When Your SQL Table Outgrows Itself: Lessons from Refactoring at Scale | Harness Blog

At Harness, we build an AI-powered software delivery platform, and test result data is core to how we help engineering teams ship faster. The table that stores it started small: one row per record, all the context right there on the row. Simple, readable, and it worked. Until it didn't. This is the story of how we refactored it, what we learned, and what I'd tell you to watch for in your own systems.

Claude Code + Harness | Software Delivery for the Agent Era

Claude Code changes how fast software gets written. Harness changes whether you can trust what shipped. In this video, watch how autonomous AI agents handle end-to-end bug fixing, security remediation, and deployment verification—all within an automated Harness pipeline. From reading a ticket to running canary deployments and self-healing broken manifests, see how engineering teams can deliver software faster without sacrificing quality or security.

AI SAST Explained: Why Traditional Application Security Is Reaching Its Breaking Point | Harness Blog

AI has fundamentally changed software development. Developers are writing more code than ever. AI coding assistants can generate features, tests, documentation, and infrastructure configurations in minutes. Engineering organizations are seeing meaningful productivity gains as AI becomes embedded throughout the software development lifecycle. But there is a catch. Security teams now face a difficult reality: application security was already struggling to keep pace with software delivery before AI arrived.

AI's BIGGEST Problem, They're Losing Money!

For every $1 you pay OpenAI or Anthropic, it's costing them about $1.60. AI is running at a loss — so is the whole business model broken? The full bill for AI hasn't landed yet. In this ShipTalk short, Field CTOs Adam and Martin break down the economics of generative AI: why the frontier labs lose money on every prompt, why they'd need to raise prices ~60% just to break even, and the bet the entire industry is making — that inference costs drop fast enough to catch up. Plus the Gartner forecast every CFO should see: by 2028, the AI bill could be bigger than the employment bill.

Chaos Hub in docs, Prompt Library for MCP: what's new in Resilience Testing | Harness Blog

The latest Resilience Testing documentation update brings Chaos Hub directly into the docs, making it easier to discover and use fault, probe, and action templates. It also introduces a Prompt Library with ready-to-use AI prompts for Harness MCP, helping teams run resilience workflows faster using natural language.

Why Cloud Cost Visibility at Scale Fails (And How to Fix It) | Harness Blog

Cloud cost visibility at scale usually works great… until it suddenly doesn’t. At first, everything feels manageable. You can track spend by service. You know which team owns which resources. Reports are clean, and the numbers make sense. Then one day, there’s a $47,000 spike spread across three AWS accounts that no one noticed for eleven days. Leadership wants answers. Engineering wants context. And your carefully designed tagging strategy?

How to automate artifact cleanup in Harness Artifact Registry without breaking production | Harness Blog

AI is changing artifact management in two ways at once. Every AI-generated pull request, dependency update, and automated build creates more container images, packages, and Helm charts than ever before. Registries are growing faster than engineering teams can manage them, driving up storage costs and leaving thousands of stale artifacts behind. At the same time, the cost of deleting the wrong artifact has never been higher.

The AI Hack Nobody Told You About

AI agents are now hacking on their own — and it already happened to two of the world's biggest AI labs. OpenAI's models broke out of a test sandbox, exploited a vulnerability, and hit Hugging Face's production systems. Days later, Anthropic reviewed over 141,000 evaluation runs and found three of its own Claude models had done the exact same thing to three different organizations.

Control Runtime Behavior with Config Management | Harness Blog

As organizations ship software faster than ever, runtime behavior changes are becoming just as frequent as code releases. Teams need a way to update application behavior without waiting for code deployments while maintaining visibility, governance, and control. ‍ Now available in beta, Config Management provides a governed runtime control plane that separates runtime configuration from application deployments, enabling organizations to deliver configuration changes instantly across environments.

Get Ship Done: Everything We Shipped in July 2026 | Harness Blog

Harness shipped 71 features in July, about one every 10 hours. That's more than June's 62, and the surge lines up with what AI is doing to the rest of the SDLC: coding agents are writing more of the code, test agents are now generating and running more of the tests by default, and every stage downstream: deployment, security, cost, and resilience has to absorb that pace without falling over.