Operations | Monitoring | ITSM | DevOps | Cloud

An Open SDLC Controls Framework for Financial Services

How can financial institutions align on software delivery governance without slowing down innovation? At FINOS OSFF New York 2025, Deutsche Bank and Morgan Stanley introduced the new SDLC Governance Working Group — an open collaboration under FINOS to create a Common Controls Catalogue for software delivery. Kosli's Mike Long helped form and participates this group, contributing expertise in continuous compliance automation and controls engineering to connect the engineering and policy communities.

Audit Ready Artifacts: JFrog Artifactory + Kosli, How to Prove Where Your Artifacts Came From

Your artifact repository tells you what software is stored — but can it tell you how it got there, and who approved it? In this video, Matt Bailey (Product Manager, Kosli) shows how JFrog Artifactory and Kosli work together to give you both storage and story. While Artifactory stores your binaries, Kosli automatically builds an immutable chain of custody — recording every commit, build, test, and deployment that led to your artifact in production.

Faster Approvals: ServiceNow + Kosli, How to Automate Compliance Evidence for Change Management

Are your deployments getting stuck waiting for approvals? If your code is ready but your ServiceNow change ticket isn’t — the bottleneck might not be people or process. It’s missing evidence. In this video, Matt Bailey (Product Manager, Kosli) shows how ServiceNow and Kosli work together to automate compliance evidence collection — turning manual approval bottlenecks into seamless, audit-ready change management.

Storage and Story: JFrog Artifactory + Kosli, How to Prove Where Your Artifacts Came From

Your artifact repository tells you what software is stored — but can it tell you how it got there, and who approved it? In this video, Matt Bailey (Product Manager, Kosli) shows how JFrog Artifactory and Kosli work together to give you both storage and story. While Artifactory stores your binaries, Kosli automatically builds an immutable chain of custody — recording every commit, build, test, and deployment that led to your artifact in production.

Faster Approvals with ServiceNow + Kosli, How to Automate Compliance Evidence for Change Management

Are your deployments getting stuck waiting for approvals? If your code is ready but your ServiceNow change ticket isn’t — the bottleneck might not be people or process. It’s missing evidence. In this video, Matt Bailey (Product Manager, Kosli) shows how ServiceNow and Kosli work together to automate compliance evidence collection — turning manual approval bottlenecks into seamless, audit-ready change management.

What is Content Addressable Storage?

Imagine a world where every change in your systems from a config tweak to a deployment carries its own cryptographic proof. No forms. No meetings. Just mathematical truth. In this video, Mike Long (CEO & Co-Founder, Kosli) explains how cryptographic fingerprints like SHA-256 are used to create unique identities for files, code, and configurations — and how Kosli uses this approach to continuously track changes across servers, Kubernetes clusters, and cloud environments.

Mike Long and DORA Community Discussion - Software Delivery Governance

Manual governance in regulated industries is like steering a ship with last year’s map. Approvals, ticket queues, and after-the-fact evidence collection slow delivery and increase risk. By the time an audit arrives, teams are scrambling to prove they followed the process. Watch Kosli’s Mike join Nathen Harvey at DORA to unpack why this happens — and what continuous, automated governance can do to fix it.

Rewriting the Same Controls-Over and Over Again? How FINOS and Kosli Are Fixing Software Compliance

Every bank needs to prove it’s compliant. So why is every bank reinventing the same rules? Manual, duplicative compliance across teams Engineers stuck gathering screenshots for audits Custom rules for common risks Missed opportunity to define shared standards Mike joins FINOS Aaron Griswold and explains why Kosli joined FINOS—and how defining shared SDLC controls can help regulated organizations stop wasting time and start delivering software faster and safer. Unpacking the real problems in regulated software delivery.