Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.
There might be many people across organizations who claim that they’re using a DevOps approach, but often times, the “best practices” they’re using don’t align with DevOps methodologies. They can say what they do is “DevOps”, but what we’ve found is that many are actually not following basic agile methodology principles, and that’s not DevOps. Ever.
How Are We So Sure?
Electric Cloud gathered data from thousands of engineers and IT leaders across three major events – DOES 2016, Agile 2016 and Appshere 2016 (and compared it with specific data sets from the Puppet and DORA 2016 State of the DevOps Report) – asking them about their deployment and application release automation practices, and we found some interesting patterns.
For starters, the data show us that the majority of deployments are still manual. Specifically, over 70 percent of deployments use a combination of manual processes and some automation. While many think, in this instance, that they are automating their releases, this isn’t automation. Just because you’re using a Chef recipe to automate one of your releases, doesn’t mean you’re an automated shop.
It Gets Worse
The two remaining datasets from this section tells us perhaps the most disappointing fact – 23 percent of deployments are still fully manual and only 6 percent of deployments are fully automated. Let’s face it; manual intervention often leads to errors and non-repeatable processes. No bueno. If testing or deployments are handled manually, it’s nearly impossible to implement continuous delivery or continuous integration in any way. What this statistic tells us is that many don’t realize that they have increased the risk of defects to their software (which almost always creates unplanned workloads), or a higher risk of deployments failing all together.
When relying on manual processes versus automation, an entire host of problems can emerge. The top challenges with manual deployments are:
1. Environment differences and configuration drift
2. Manual, error-prone steps
3. Complex application dependencies
4. Manual deployments often lead to more time spent troubleshooting deployment failures
The bottom line is this: manual deployments are extremely brittle and error-prone. This creates not only failed deployments, but also the loss of hundreds of worker hours trying to troubleshoot those failures. This is certainly painful in mission critical production environments, but carries great cost, even long before you reach production release.
The Bigger Truth
As surprising as it might be to read in 2017, IT departments are still struggling to release software at the rate the business demands. As we see from the Puppet and DORA 2016 State of the DevOps Report, automation eliminates common challenges that come with manual deployments, and delivers better results.
Deployment automation is the linchpin of DevOps success. Automated deployments allow organizations to drastically cut cycle times, accelerate releases and reduce application backlogs. Specifically, according to the Puppet and DORA Report, automation provides 200x more frequent deployments, 3x lower change failure rates, 24x faster recovery from failures and 2555x shorter lead times.
Deployment Automation is the Linchpin of DevOps Success
DevOps is not the responsibility of one person or one team. It’s a company mindset that when set in motion, delivers immediate value. The right Application Release Automation solution can dramatically accelerate your time-to-market and cycle times, give you confidence in your IT operations, enhance teamwork, and reduce operational costs.
Industry News
GitHub announced the general availability of security campaigns with Copilot Autofix to help security and developer teams rapidly reduce security debt across their entire codebase.
DX and Spotify announced a partnership to help engineering organizations achieve higher returns on investment and business impact from their Spotify Portal for Backstage implementation.
Appfire announced its launch of the Appfire Cloud Advantage Alliance.
Salt Security announced API integrations with the CrowdStrike Falcon® platform to enhance and accelerate API discovery, posture governance and threat protection.
Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.
StackGen has partnered with Google Cloud Platform (GCP) to bring its platform to the Google Cloud Marketplace.
Tricentis announced its spring release of new cloud capabilities for the company’s AI-powered, model-based test automation solution, Tricentis Tosca.
Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.
AutonomyAI announced its launch from stealth with $4 million in pre-seed funding.
Kong announced the launch of the latest version of Kong AI Gateway, which introduces new features to provide the AI security and governance guardrails needed to make GenAI and Agentic AI production-ready.
Traefik Labs announced significant enhancements to its AI Gateway platform along with new developer tools designed to streamline enterprise AI adoption and API development.
Zencoder released its next-generation AI coding and unit testing agents, designed to accelerate software development for professional engineers.
Windsurf (formerly Codeium) and Netlify announced a new technology partnership that brings seamless, one-click deployment directly into the developer's integrated development environment (IDE.)