Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.
Nearly two decades ago, proponents of the DevOps movement rallied against traditional software models that called for the developers who write code to be organizationally and functionally separate from those who deploy and support the code. Despite taking a few years, DevOps gained full adoption, and Agile development practices like automated build and test became the status quo after Gartner got on board with the concept in 2011.
Security and Compliance Enter the Arena
Looking back, it's safe to say that Agile and DevOps delivered on their promise of continuous integration and delivery. Development and operations teams were finally provided the flexibility to make changes and improvements during phases, accelerating the delivery of quality software. Despite DevOps's widespread adoption and success, other teams were siloed, including security and compliance. In the nascent stage of DevOps, security and compliance were often sidelined, creating bottlenecks and being labeled as the culprits for delayed releases.
In 2014, the landscape was jolted by an 80% surge in security breaches from the previous year, with over one billion records compromised across 1,500 incidents, as reported by Security Week(link is external). High-profile companies like Home Depot, JP Morgan Chase, and eBay were victims of cyberattacks. These events triggered a shift in development paradigms, placing security and compliance in a pivotal role.
Configuration errors gave rise to DevSecOps, and organizations began integrating security into the Agile development process from the outset. Although the term "DevOps" may seem a bit antiquated, DevSecOps thrives, contingent on embracing the necessary cultural and procedural changes. DevSecOps is bolstered by technology but hinges on a company-wide security-conscious mindset and adopting automated security testing tools.
Exploring Platform Engineering
Recently, platform engineering has become the next big thing, sparking interest in its focus on developing self-service internal developer platforms (IDPs) for streamlined software delivery and lifecycle management. As Gartner(link is external) states, "Platform engineering is an emerging technology approach that can accelerate the delivery of applications and the pace at which they produce business value."
Gartner expects that by 2026, "80% of software engineering organizations will establish platform teams as internal providers of reusable services, components, and tools for application delivery. Platform engineering will ultimately solve the central problem of cooperation between software developers and operators."
In platform engineering, the platform is supported by layered services or tools, created and maintained by a dedicated product team, designed to help the needs of software developers by essentially stitching together components to create a frictionless developer experience. This methodology incorporates Agile, DevOps, and DevSecOps principles and complements them, offering broader benefits when considered collectively.
Key Synergies:
■ Developer Experience and Productivity – DevSecOps improves support across IT Ops, security, and compliance, not just developers.
■ Automation – DevSecOps hinges on policy-as-code automation for infrastructure and compliance, while platform engineering expands automation throughout the development cycle.
■ Self-service – Platform engineering builds on the services-oriented, automated approach of DevSecOps, facilitating self-service capabilities and empowering developers in security and compliance.
■ Accelerate Value – At the core of tech enablement, from platforms to tools and processes, is the acceleration of high-quality, resilient, and secure application delivery.
As platform engineering gains traction, the integration of DevOps and DevSecOps remains vital, underscoring the enduring relevance of these practices despite the potential for new nomenclature. The evolving roles of DevOps and DevSecOps within the scope of platform engineering are not to be underestimated, as they are central to the rapid development and deployment of applications in an increasingly security-conscious world.
Industry News
Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.
The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.
Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.
SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.
Akamai Technologies introduced App & API Protector Hybrid.
Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.
Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).
Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.
GitHub announced the general availability of security campaigns with Copilot Autofix to help security and developer teams rapidly reduce security debt across their entire codebase.
DX and Spotify announced a partnership to help engineering organizations achieve higher returns on investment and business impact from their Spotify Portal for Backstage implementation.
Appfire announced its launch of the Appfire Cloud Advantage Alliance.
Salt Security announced API integrations with the CrowdStrike Falcon® platform to enhance and accelerate API discovery, posture governance and threat protection.
Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.
StackGen has partnered with Google Cloud Platform (GCP) to bring its platform to the Google Cloud Marketplace.