Operations | Monitoring | ITSM | DevOps | Cloud

Compliance Without Complexity: Introducing Harness Rego Policy Packs | Harness Blog

In the fast-paced world of modern software delivery, compliance is often a bottleneck. While our existing OPA-based Policy as Code feature has long empowered teams to encode complex authorization checks and enforce granular governance across their DevOps workflows, we know that starting from a blank page can be daunting. Security and governance teams struggle to keep up with the volume of releases, while developers often find the initial setup of these policies to be time-consuming.

Poisoning The Pipeline: How The Mastra AI Ecosystem Was Poisoned At The Registry Level | Harness Blog

The open-source landscape has witnessed another highly automated, ecosystem-level subversion. On June 17, 2026, a critical software supply chain attack struck the Mastra AI framework - a popular open-source TypeScript ecosystem used widely to build AI agents, workflows and RAG pipelines. By exploiting a compromised contributor account, threat actors successfully mass-published 144 malicious packages under the official @mastra npm scope.

How We Secured AI Worker Agents in Harness | Harness Blog

When we launched Autonomous Worker Agents, the message we led with was simple: governance is inherited, not integrated. Agents don't get security bolted on after the fact. They inherit the OPA policies, RBAC, and audit trails already running your production pipelines. This post is about the layer underneath that promise: isolation. We let an Autonomous Worker Agent run shell commands and call APIs inside our pipelines.

Prepare for the EU AI Act with Harness AI Security | Harness Blog

Harness AI Security provides a unified control plane for AI discovery, risk visibility, and runtime protection, helping organizations operationalize key requirements of the EU AI Act. Instead of relying on manual audits or fragmented tooling, teams get continuous insight into how AI systems are built, exposed, and used, along with the evidence needed to demonstrate compliance.

Harness Agents

Today, we're launching Autonomous Worker Agents, AI agents that run as governed pipeline steps inside Harness. They inherit OPA policies, RBAC, audit trails, and scoped credentials from the first run. And because they live inside your Harness pipelines, they reason using the Harness Knowledge Graph: your services, deployments, incidents, and policies.

From a $28,000 AI Bill to $0.60 Per Ticket

Engineering teams are burning through AI budgets with nothing to show for it — $100M across 10,000 engineers and no cost per run, no cost per outcome, just a number that keeps climbing. When it runs dry, your infrastructure upgrade gets cut. Harness ties every AI token to the outcome it created: cost per run, cost per resolved ticket, and anomaly detection before the invoice hits. One customer went from a $28,000 black box bill to $0.60 per ticket.

Autonomous Worker Agents: AI Agents in Your Pipelines | Harness Blog

AI is writing more of the code. Software delivery, the work between writing code and running it in production, is where most of the day still goes. Building, testing, scanning, deploying, remediating, and operating still require the same, if not more, effort as before AI. Today, we're introducing Autonomous Worker Agents for software delivery: the platform for enterprises to build and safely run AI agents that handle the work between writing code and shipping it to production.

Stop Token Maxing The Future of Al Budget Management

The era of token maxing is over. When Claude Fable 5 launched last week at $10/$50 per million tokens - double the price of Opus 4.8 - it was a clear reminder that the most powerful model isn't always the right model. Not every task needs the Ferrari. The fastest way to burn your Al budget is sending every request to the most expensive model by default. The real question for the next phase of Al cost management isn't "can this model do the job?" — it's "is it the right model for the job?".

Ship From Where You Build: Harness Delivery Intelligence, Now Inside Antigravity | Harness Blog

The Harness MCP Server now connects directly inside Google Antigravity. Developers can link Harness in under two minutes and give the agent structured, real-time access to their pipelines, execution history, services, environments, and policies, without leaving the editor. What makes it reliable isn't the connection itself. It's the Harness Software Delivery Knowledge Graph underneath, which gives the agent the context to act accurately, fast, and within your guardrails. ‍