CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.
Culture is the single most critical part of any DevOps initiatives. You can have a great technology stack with all the right tooling in place, but if your teams don't trust each other, don't communicate effectively, and play the blame game, the chances of a DevOps initiative paying off are slim.
But culture is also hard to define. That's why we've spent a lot of effort the past few years studying it in our annual State of DevOps Report.
We found that organizational investment in DevOps is the strongest correlation to organization culture and is also predictive of organizational performance. Why? By making an initiative like DevOps a high priority and following through by communicating that with the organization, it shows what a big deal it is.
Secondly, changing culture is hard and requires organizational support and investment – investment in employee training and development, and in new tooling to support the initiative.
Once an organization has made the commitment and communicated it to everyone, there are a number of ways leaders can further invest in their teams:
■ Allow time for training: This requires a dedicated training budget that people know how to access. People should be able to choose training they find most interesting, rather than being restricted to specific manager chosen topics – even if it isn't directly applicable to what their job is today.
■ Enable employees to travel for conferences: Even if it's only once a year, staff should be encouraged to attend conferences and share what they learned with the rest of the team.
■ Provide time to experiment: Provide the time, infrastructure and budget for staff to have dedicated time to try out new tools and technologies. Not only will this create more engaged and happy people, but sometimes the best new ideas are originated from experimentation.
Tim Zonca is VP of Product Marketing for Puppet.
Industry News
Bauplan, a Python-first serverless data platform that transforms complex infrastructure processes into a few lines of code over data lakes, announced its launch with $7.5 million in seed funding.
Perforce Software announced the launch of the Kafka Service Bundle, a new offering that provides enterprises with managed open source Apache Kafka at a fraction of the cost of traditional managed providers.
LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.
Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.
Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.
Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.
Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.
The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.
Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.
SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.
Akamai Technologies introduced App & API Protector Hybrid.
Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.
Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).
Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.