OpsMx Announces "Code to Cloud" Application Delivery Security and Compliance for Kubernetes Environments
December 11, 2023

OpsMx announced new automated compliance capabilities for Kubernetes environments that give customers immediate visibility into their end-to-end application security posture.

New auto-discovery of applications from the existing software delivery process combined with an expanded library of predefined rules, AI generation of new organization-specific policies, and cross-team collaboration simplify the adoption of industry best practices. Integration with the recently announced OpsMx Deployment Firewall enables new application releases to be automatically checked for compliance during the software delivery process, while a new integration with the Kubernetes admission controller can be used to block out-of-compliance releases.

“Customers need a better way to understand their current application security posture using the tools, data, and processes they already have,” said Gopal Dommety, CEO and co-founder of OpsMx. “OpsMx is now bringing to market the automation, rules, and intelligence to first show customers where they really stand and then help them take control of their application lifecycle security without disrupting how they work today.”

As a first step in application delivery compliance, OpsMx can now auto-discover the application and service structure directly from enterprise Kubernetes services, including Google Kubernetes Engine (GKE), Amazon Elastic Kubernetes Service (EKS), Microsoft Azure Kubernetes Service (AKS), self-managed Kubernetes, and RedHat OpenShift. OpsMx can similarly integrate and auto-discover from existing CI/CD pipelines running in ArgoCD, Jenkins, Spinnaker, GitHub Actions, and Azure DevOps. Manual specification and configuration is not required to get started.

For each application or service, OpsMx collects data from over ninety common DevOps, security, and IT operations tools. Using this data, OpsMx synthesizes a detailed view of each release, including all steps in the release process, approvals and review, code provenance, and security checks to create a Delivery Bill of Materials. DevSecOps, SRE, and Operations teams can get a holistic view of the release process and its compliance status through the OpsMx console or through the integration of OpsMx data into the organization’s preferred Internal Developer Platform (IDP).

A new integration to the Kubernetes admission controller gives customers the ability to enforce software delivery compliance. If desired, Kubernetes admission control can be used to block the deployment of an application that is not in compliance with the organization’s defined policies.
Expanded Compliance Controls

To simplify compliance, with this announcement, OpsMx is expanding its set of pre-defined compliance controls based on the NIST 800-53 standard. This enables customers to immediately see their current level of compliance against industry best practices. Based on their specific requirements, customers can use this visibility to generate alerts, track exceptions, or if desired stop the deployment of out-of-compliance releases. The library of controls draws from eight NIST 800-53 control families:

Access Control (AC)
Audit and Accountability (AU)
Assessment and Authorization (CA)
Configuration Management (CM)
Identity and Authentication (IA)
System and Services Acquisition (SA)
System and Communications Protection (SC)
System Integrity (SI)

The selected controls are those that can be effectively evaluated and enforced as part of the application development, delivery, and deployment process. Many of these same controls are also required for HIPAA, PCI DSS, and other compliance standards.

Share this

Industry News

April 03, 2025

StackGen has partnered with Google Cloud Platform (GCP) to bring its platform to the Google Cloud Marketplace.

April 03, 2025

Tricentis announced its spring release of new cloud capabilities for the company’s AI-powered, model-based test automation solution, Tricentis Tosca.

April 03, 2025

Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.

April 03, 2025

AutonomyAI announced its launch from stealth with $4 million in pre-seed funding.

April 02, 2025

Kong announced the launch of the latest version of Kong AI Gateway, which introduces new features to provide the AI security and governance guardrails needed to make GenAI and Agentic AI production-ready.

April 02, 2025

Traefik Labs announced significant enhancements to its AI Gateway platform along with new developer tools designed to streamline enterprise AI adoption and API development.

April 02, 2025

Zencoder released its next-generation AI coding and unit testing agents, designed to accelerate software development for professional engineers.

April 02, 2025

Windsurf (formerly Codeium) and Netlify announced a new technology partnership that brings seamless, one-click deployment directly into the developer's integrated development environment (IDE.)

April 02, 2025

Opsera raised $20M in Series B funding.

April 02, 2025

The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, is making significant updates to its certification offerings.

April 01, 2025

The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced the Golden Kubestronaut program, a distinguished recognition for professionals who have demonstrated the highest level of expertise in Kubernetes, cloud native technologies, and Linux administration.

April 01, 2025

Red Hat announced new capabilities and enhancements for Red Hat Developer Hub, Red Hat’s enterprise-grade internal developer portal based on the Backstage project.

April 01, 2025

Platform9 announced that Private Cloud Director Community Edition is generally available.

March 31, 2025

Sonatype expanded support for software development in Rust via the Cargo registry to the entire Sonatype product suite.

March 31, 2025

CloudBolt Software announced its acquisition of StormForge, a provider of machine learning-powered Kubernetes resource optimization.