Security is Strengthened by Platform Engineering
April 03, 2024

The continued maturity of platform engineering is shown by 43% of respondents reporting they have had a platform team for at least 3-5 years, according to the 2024 State of DevOps Report from Puppet.

Key findings of the report include:

Security built into platform engineering

Security is being built into the foundation of platform engineering, with far-reaching benefits for organizations who understand that Security is priority one.

■ 43% of respondents say that their platform has a dedicated security and compliance team, highlighting the importance of proactive security management.

■ Most respondents report that the platform team has helped their company become more compliant.

■ 51% of respondents say that platform teams are also responsible for enforcing software and tool versions for security updates.

Automation unlocks DevOps potential

Standardized automation unlocks the full potential of DevOps.

■ Organizations report an average of 3 self-service platforms operating internally, indicating expansion and maturity since last year's report.

■ "Automation," "productivity," and "standardized processes" are cited as the three top use cases that platform engineering helps solve.

■ 66% report that automating workflows and processes "is in scope" for their growing platform engineering teams.

Platform engineering team should support developers

It's critical that developers are supported by the platform engineering team to do their best work.

■ 52% say that a product manager is crucial to the success of the platform team.

■ Respondents cite "increased productivity," "better quality of software," and "reduced lead time for deployment" as the top benefits that the platform team has delivered for developers.

■ 65% of respondents report that the platform team is important and will receive continued investment.

As the number of self-service platforms increase, the report also shows that most functions have moved onto a platform of their own — especially the security function.

Methodology: The survey collected data from IT practitioners and leaders who work with or are part of their company's platform engineering teams, as well as from a control group of similar participants who do not have platform teams at their organizations. The survey was conducted online from August 24 to September 30 2023 from three primary world regions NorAm (38%), EMEA (27%), APAC (22%) and Other (13%). Respondents were gathered through two avenues, a snowball sampling method and a panel. The report was sponsored by the Continuous Delivery Foundation, Humanitec, and Women in DevOps.

Share this

Industry News

April 29, 2024

Code Intelligence announced a new feature to CI Sense, a scalable fuzzing platform for continuous testing.

April 29, 2024

WSO2 is adding new capabilities for WSO2 API Manager, WSO2 API Platform for Kubernetes (WSO2 APK), and WSO2 Micro Integrator.

April 29, 2024

OpenText™ announced a solution to long-standing open source intake challenges, OpenText Debricked Open Source Select.

April 29, 2024

ThreatX has extended its Runtime API and Application Protection (RAAP) offering to provide always-active API security from development to runtime, spanning vulnerability detection at Dev phase to protection at SecOps phase of the software lifecycle.

April 29, 2024

Canonical announced the release of Ubuntu 24.04 LTS, codenamed “Noble Numbat.”

April 25, 2024

JFrog announced a new machine learning (ML) lifecycle integration between JFrog Artifactory and MLflow, an open source software platform originally developed by Databricks.

April 25, 2024

Copado announced the general availability of Test Copilot, the AI-powered test creation assistant.

April 25, 2024

SmartBear has added no-code test automation powered by GenAI to its Zephyr Scale, the solution that delivers scalable, performant test management inside Jira.

April 24, 2024

Opsera announced that two new patents have been issued for its Unified DevOps Platform, now totaling nine patents issued for the cloud-native DevOps Platform.

April 23, 2024

mabl announced the addition of mobile application testing to its platform.

April 23, 2024

Spectro Cloud announced the achievement of a new Amazon Web Services (AWS) Competency designation.

April 22, 2024

GitLab announced the general availability of GitLab Duo Chat.

April 18, 2024

SmartBear announced a new version of its API design and documentation tool, SwaggerHub, integrating Stoplight’s API open source tools.

April 18, 2024

Red Hat announced updates to Red Hat Trusted Software Supply Chain.

April 18, 2024

Tricentis announced the latest update to the company’s AI offerings with the launch of Tricentis Copilot, a suite of solutions leveraging generative AI to enhance productivity throughout the entire testing lifecycle.