The State of Modern Apps and DevSecOps in the Cloud
September 27, 2018

Kalyan Ramanathan
Sumo Logic

Imagine that you are tasked with architecting a mission-critical cloud application. Or migrating an on-premise app to the cloud. You may ask yourself, "how do the cloud savvy companies like Airbnb, Adobe, SalesForce, etc. build and manage their modern applications?"

Or perhaps, you wonder about things like :

■ How are they releasing applications multiple times a day? (With technologies like Docker.)

■ How do they ensure always-on availability? (Orchestration automates it for you.)

■ Is this serverless stuff for real? (Oh, absolutely!)

■ Can I ensure security in the cloud? (You can, if you plan it well.)

■ Can I get centralized and real-time visibility into all my development, operations and security tools? (Yes! Especially if you send it all to a machine data platform.)

The answers to these questions and more are found in Sumo Logic's State of Modern Applications and DevSecOps in the Cloud report. The report provides exclusive data-driven insights, best practices and emerging trends within the modern application stack based on Sumo Logic's customer base of more than 1,600 enterprises. In addition, the report highlights trends and visibility into the DevSecOps tools and solutions that are used within cloud-first organizations as they "lift and shift" or modernize and migrate existing applications.

Here are five key takeaways from this year's report:

Azure adoption grows, signaling demand for multi-cloud choices

While AWS dominates in the public cloud world (and we have seen this for three years running), we are seeing multi-cloud adoption double year-over-year (YoY); we also see Azure adoption doubling YoY.

Containers and orchestration technology usage spikes in less than a year

Orchestration and containers adoption are exploding; one in three enterprises use managed or native Kubernetes orchestration solutions and 28 percent of enterprises use Docker containers in AWS.

AWS Lambda is king for serverless adoption

Serverless is quickly rising to the top, with one in three enterprises using AWS Lambda technologies. If they're not already, app architects should consider using Lambda for application or deployment automation for every production application.


Enterprises are adopting cloud-native security services

Security is still a major focus area for enterprises adopting cloud or migrating/modernizing existing traditional applications. More than one in four enterprises are adopting a combination of cloud-native platform security services (AWS CloudTrail, VPC Flow Logs, GuardDuty, CrowdStrike, etc.)

Appetite for security and threat intelligence insights is strong

DevSecOps adoption is increasing. To improve software agility, reliability and security, enterprises are actively monitoring and analyzing their end-to-end tools and processes across the lifecycle with machine data analytics solutions. This gives them the insights needed to create a seamless modern app ecosystem.

Armed with this knowledge, we can use these trending insights to better understand the modern application and DevSecOps landscapes and help enterprises create tailored strategies that are right for their specific operational, security and business needs.

The biggest finding for me? Adopting a secure, cloud-native, unified machine data analytics solution can significantly help organizations streamline their optimization and troubleshooting efforts while providing the level of performance and security their customers require, the closest thing to ensuring success in today's dynamic, ever-changing always-on digital landscape.

Kalyan Ramanathan is VP of Product Marketing at Sumo Logic
Share this

Industry News

May 08, 2024

MacStadium announced that it has obtained Cloud Security Alliance (CSA) Security, Trust & Assurance Registry (STAR) Level 1, meaning that MacStadium has publicly documented its compliance with CSA’s Cloud Controls Matrix (CCM), and that it joined the Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment.

May 08, 2024

The Cloud Native Computing Foundation® (CNCF®) released the two-day schedule for CloudNativeSecurityCon North America 2024 happening in Seattle, Washington from June 26-27, 2024.

May 08, 2024

Sumo Logic announced new AI and security analytics capabilities that allow security and development teams to align around a single source of truth and collect and act on data insights more quickly.

May 08, 2024

Red Hat is announcing an optional additional 12-month EUS term for OpenShift 4.14 and subsequent even-numbered Red Hat OpenShift releases in the 4.x series.

May 08, 2024

HAProxy Technologies announced the launch of HAProxy Enterprise 2.9.

May 08, 2024

ArmorCode announced the general availability of AI Correlation in the ArmorCode ASPM Platform.

May 08, 2024

Octopus Deploy launched new features to help simplify Kubernetes CD at scale for enterprises.

May 08, 2024

Cequence announced multiple ML-powered advancements to its Unified API Protection (UAP) platform.

May 07, 2024

Oracle announced plans for Oracle Code Assist, an AI code companion, to help developers boost velocity and enhance code consistency.

May 07, 2024

New Relic launched Secure Developer Alliance.

May 07, 2024

Dynatrace is enhancing its platform with new Kubernetes Security Posture Management (KSPM) capabilities for observability-driven security, configuration, and compliance monitoring.

May 07, 2024

Red Hat announced advances in Red Hat OpenShift AI, an open hybrid artificial intelligence (AI) and machine learning (ML) platform built on Red Hat OpenShift that enables enterprises to create and deliver AI-enabled applications at scale across hybrid clouds.

May 07, 2024

ServiceNow is introducing new capabilities to help teams create apps and scale workflows faster on the Now Platform and to boost developer and admin productivity.

May 06, 2024

Red Hat and Oracle announced the general availability of Red Hat OpenShift on Oracle Cloud Infrastructure (OCI) Compute Virtual Machines (VMs).

May 06, 2024

The Software Engineering Institute at Carnegie Mellon University announced the release of a tool to give a comprehensive visualization of the complete DevSecOps pipeline.