Operations | Monitoring | ITSM | DevOps | Cloud

Secrets We Forgot... Until Automation Saved Us

We All Have That One Secret… That API key that has been sitting in production for ages. The personal access token that was supposed to be rotated 2 months ago. The service key that is about to expire… wait, when does it expire again? Most developers have experienced working with secrets. We create secrets, use them, and promise ourselves that we will rotate them. But somehow, the secret that was supposed to be rotated after 90 days is still standing strong after 6 months. Sounds familiar?

Mike Long and DORA Community Discussion - Software Delivery Governance

Manual governance in regulated industries is like steering a ship with last year’s map. Approvals, ticket queues, and after-the-fact evidence collection slow delivery and increase risk. By the time an audit arrives, teams are scrambling to prove they followed the process. Watch Kosli’s Mike join Nathen Harvey at DORA to unpack why this happens — and what continuous, automated governance can do to fix it.

Build. Release. Run. Repeat. But Where's the Control?

In every engineering organization, from fintech unicorns to 20,000-seat global bank, delivery happens in a loop. Code gets built. Releases get pushed. Systems run 24/7. Then it all happens again. This cycle isn’t an opinionated lifecycle dreamed up by a consultant or vendor, it’s just the reality of software delivery today.

Rewriting the Same Controls-Over and Over Again? How FINOS and Kosli Are Fixing Software Compliance

Every bank needs to prove it’s compliant. So why is every bank reinventing the same rules? Manual, duplicative compliance across teams Engineers stuck gathering screenshots for audits Custom rules for common risks Missed opportunity to define shared standards Mike joins FINOS Aaron Griswold and explains why Kosli joined FINOS—and how defining shared SDLC controls can help regulated organizations stop wasting time and start delivering software faster and safer. Unpacking the real problems in regulated software delivery.

Security and Compliance Takes Center Stage: Key Insights from Open Source Finance Forum - London 2025

We’ve just wrapped up London’s 2025 Open Source Finance Forum (OSFF) in London and in this blog I’ll try to capture the key highlights from this year’s event while they’re still fresh. Dominant themes were the increasing prominence of legislation and governance frameworks, and what these mean for developers and practitioners.

The Future of Auditing is Agentic AI

There is a huge amount of hype around AI. Companies are growing faster than ever, IT budgets are being redirected, and product roadmaps everywhere are being redrawn. There is no doubt LLM’s are a transformative technology. At the same time, as with any early technology cycle we are far from understanding the patterns of success. And for sure, mis-steps and bad takes abound.

Introducing Environment Policy- Gain Unified Control Over Compliance Requirements Across Your Runtime Environments

In modern software development, different environments often have different compliance requirements. Your development environment might allow more flexibility, while production demands strict controls around security scans, testing, and code review. Environment Policy helps you codify these requirements and enforce them consistently.

The Full Picture of Software Delivery: How Kosli Connects Every Change to Its Origin

Software engineers don’t need more dashboards or forms. They need a reliable record of what actually happened in their systems—and how it ties back to the code. In this video, Mike Long (CEO & Co-founder, Kosli) explains how Kosli records every event in your SDLC and connects it to every system change. This gives you a full, auditable view of software delivery—from code to production.

Zero Trust for Compliance: How Kosli Helps Engineers Automate the Paperwork

Engineers didn’t sign up to fill out forms, attend CAB meetings, or screenshot deployments. Yet that’s the reality of compliance in many organizations. In this video, Mike Long (CEO & Co-founder, Kosli) explains how Kosli helps software engineers eliminate the repetitive, meaningless tasks of traditional compliance — and replaces them with something automated, provable, and secure. Video Timeline.

Flexible, Evidence-Driven Compliance: Meet Kosli's Custom Attestations

At Kosli, we believe that governance in software delivery shouldn’t be a bottleneck – it should be an extension of how your teams already work. That’s why we’re excited to introduce custom attestations in Kosli. Here’s the short version: What are custom attestations? They let you record facts about your workflows – with evidence – using controls that actually match your processes. Why does this matter? Because generic attestations can miss the mark.