Operations | Monitoring | ITSM | DevOps | Cloud

Secure and Compliant DevOps in an AI-Enabled World

Is Your DevOps Strategy Ready for the AI Era? AI is accelerating modern software delivery—but it’s also raising the stakes for security, compliance, and auditability. As AI-driven change increases, many organizations are discovering that incomplete DevOps practices are creating new risk. Based on insights from 800+ global IT professionals, the 2026 State of DevOps Report reveals why vendor‑backed, enterprise‑grade DevOps platforms are becoming critical for managing AI‑driven risk and meeting evolving regulatory demands.

CMMC Requirements for 2026: How to Stay CMMC 2.0 Compliant & Prove Maturity at Any Level

CMMC requirements have been shifting recently, with a new version of the Cybersecurity Maturity Model Certification (CMMC 2.0) and distinct levels requiring distinct controls. Mandatory for practically any organization doing business with the US Department of Defense (DoD), CMMC is unavoidable all along the DoD’s supply chain.

AI in DevOps: How MCP and Puppet Are Changing Infrastructure Automation

AI adoption in DevOps is accelerating, but trust, accuracy, and real-world usability still matter. In this conversation, Jason St-Cyr sits down with Jessica Gao, Product Manager at Puppet, to unpack how AI is actually being used in infrastructure and operations teams today, and what’s changed over the last 12–18 months. They dive into why enterprises are moving past generic code generation tools and toward domain-specific, MCP-powered AI that integrates directly into existing workflows.

Making the Case for Vendor-Backed Puppet Core

Thousands of organizations rely on open source community builds for infrastructure automation. But if you're tasked with certifying, maintaining, and patching those builds yourself, you know the burden firsthand. The reality is that managing open source internally consumes time, introduces risk, and diverts resources from higher-value initiatives. When critical vulnerabilities emerge, your team scrambles to assess, test, and deploy fixes, all while keeping production environments stable.

Agent vs. Agentless: What is better for Infrastructure Management?

The “agent vs agentless” debate usually comes up when teams are trying to choose an infrastructure automation approach that will not compromise security, compliance, or impact day-to-day operations. You need to manage a hybrid estate, avoid creating more work for already stretched teams, and ideally do it without stitching together multiple tools. That pressure often turns the conversation into a binary choice: which approach is better?

What is Infrastructure as Code (IaC)? Best Practices, Tools, Examples & Why Every Organization Should Be Using It

Infrastructure as code (IaC) is the act of writing infrastructure configurations as code so they can be understood, repeated, and enforced with less manual effort. IaC is also a powerful way to convert institutional knowledge into technical knowledge. It’s a far-reaching and essential part of managing infrastructure at scale, with benefits that have expanded to platform engineering, security and compliance, network administration, and so much more.