Security is Strengthened by Platform Engineering
April 03, 2024

The continued maturity of platform engineering is shown by 43% of respondents reporting they have had a platform team for at least 3-5 years, according to the 2024 State of DevOps Report from Puppet.

Key findings of the report include:

Security built into platform engineering

Security is being built into the foundation of platform engineering, with far-reaching benefits for organizations who understand that Security is priority one.

■ 43% of respondents say that their platform has a dedicated security and compliance team, highlighting the importance of proactive security management.

■ Most respondents report that the platform team has helped their company become more compliant.

■ 51% of respondents say that platform teams are also responsible for enforcing software and tool versions for security updates.

Automation unlocks DevOps potential

Standardized automation unlocks the full potential of DevOps.

■ Organizations report an average of 3 self-service platforms operating internally, indicating expansion and maturity since last year's report.

■ "Automation," "productivity," and "standardized processes" are cited as the three top use cases that platform engineering helps solve.

■ 66% report that automating workflows and processes "is in scope" for their growing platform engineering teams.

Platform engineering team should support developers

It's critical that developers are supported by the platform engineering team to do their best work.

■ 52% say that a product manager is crucial to the success of the platform team.

■ Respondents cite "increased productivity," "better quality of software," and "reduced lead time for deployment" as the top benefits that the platform team has delivered for developers.

■ 65% of respondents report that the platform team is important and will receive continued investment.

As the number of self-service platforms increase, the report also shows that most functions have moved onto a platform of their own — especially the security function.

Methodology: The survey collected data from IT practitioners and leaders who work with or are part of their company's platform engineering teams, as well as from a control group of similar participants who do not have platform teams at their organizations. The survey was conducted online from August 24 to September 30 2023 from three primary world regions NorAm (38%), EMEA (27%), APAC (22%) and Other (13%). Respondents were gathered through two avenues, a snowball sampling method and a panel. The report was sponsored by the Continuous Delivery Foundation, Humanitec, and Women in DevOps.

Share this

Industry News

March 27, 2025

webAI and MacStadium(link is external) announced a strategic partnership that will revolutionize the deployment of large-scale artificial intelligence models using Apple's cutting-edge silicon technology.

March 27, 2025

Development work on the Linux kernel — the core software that underpins the open source Linux operating system — has a new infrastructure partner in Akamai. The company's cloud computing service and content delivery network (CDN) will support kernel.org, the main distribution system for Linux kernel source code and the primary coordination vehicle for its global developer network.

March 27, 2025

Komodor announced a new approach to full-cycle drift management for Kubernetes, with new capabilities to automate the detection, investigation, and remediation of configuration drift—the gradual divergence of Kubernetes clusters from their intended state—helping organizations enforce consistency across large-scale, multi-cluster environments.

March 26, 2025

Red Hat announced the latest updates to Red Hat AI, its portfolio of products and services designed to help accelerate the development and deployment of AI solutions across the hybrid cloud.

March 26, 2025

CloudCasa by Catalogic announced the availability of the latest version of its CloudCasa software.

March 26, 2025

BrowserStack announced the launch of Private Devices, expanding its enterprise portfolio to address the specialized testing needs of organizations with stringent security requirements.

March 25, 2025

Chainguard announced Chainguard Libraries, a catalog of guarded language libraries for Java built securely from source on SLSA L2 infrastructure.

March 25, 2025

Cloudelligent attained Amazon Web Services (AWS) DevOps Competency status.

March 25, 2025

Platform9 formally launched the Platform9 Partner Program.

March 24, 2025

Cosmonic announced the launch of Cosmonic Control, a control plane for managing distributed applications across any cloud, any Kubernetes, any edge, or on premise and self-hosted deployment.

March 20, 2025

Oracle announced the general availability of Oracle Exadata Database Service on Exascale Infrastructure on Oracle Database@Azure(link sends e-mail).

March 20, 2025

Perforce Software announced its acquisition of Snowtrack.

March 19, 2025

Mirantis and Gcore announced an agreement to facilitate the deployment of artificial intelligence (AI) workloads.

March 19, 2025

Amplitude announced the rollout of Session Replay Everywhere.

March 18, 2025

Oracle announced the availability of Java 24, the latest version of the programming language and development platform. Java 24 (Oracle JDK 24) delivers thousands of improvements to help developers maximize productivity and drive innovation. In addition, enhancements to the platform's performance, stability, and security help organizations accelerate their business growth ...