Pipes Feed Preview: Towards Data Science & The New Stack & DevOps & SRE & DevOps.com & Google DeepMind News

  1. The AI Was the Easy Part: What Is a Forward-Deployed Engineer in a Supply Chain?

    Mon, 03 Aug 2026 13:30:00 -0000

    <p>What actually makes a Forward Deployed Engineer, told through one supply chain project.</p> <p>The post <a href="https://towardsdatascience.com/the-ai-was-the-easy-part-what-is-a-forward-deployed-engineer-in-a-supply-chain/">The AI Was the Easy Part: What Is a Forward-Deployed Engineer in a Supply Chain?</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  2. How Claude Help Me Build My $200k+ ML Resume

    Mon, 03 Aug 2026 12:00:00 -0000

    <p>How use Claude to craft an outstanding resume that lands offers</p> <p>The post <a href="https://towardsdatascience.com/how-claude-help-me-build-my-200k-ml-resume/">How Claude Help Me Build My $200k+ ML Resume</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  3. How to Apply Coding Agents to Non-Programming Tasks

    Sun, 02 Aug 2026 15:00:00 -0000

    <p>Perform non-programming tasks with coding agents</p> <p>The post <a href="https://towardsdatascience.com/how-to-apply-coding-agents-to-non-programming-tasks/">How to Apply Coding Agents to Non-Programming Tasks</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  4. I Replaced a 15-Minute Booking Process with a LangGraph AI Agent

    Sun, 02 Aug 2026 13:00:00 -0000

    <p>A step-by-step guide to building, running, and monitoring a stateful customer support agent using Python, LangGraph, and Langfuse.</p> <p>The post <a href="https://towardsdatascience.com/i-replaced-a-15-minute-booking-process-with-a-langgraph-ai-agent/">I Replaced a 15-Minute Booking Process with a LangGraph AI Agent</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  5. Coding Agents Don’t Need Bigger Context Windows — They Need a Context Compiler

    Sat, 01 Aug 2026 15:00:00 -0000

    <p>Most coding agents treat prompt construction like retrieval: gather more files, add more context, hope the model figures it out. But that approach breaks down fast. As context grows, irrelevant code competes for attention, and when the window fills, agents start compressing their own memory—often mid-task. What looks like “forgetting” is usually just degraded context. This article explores a different approach: treating prompt construction like a compiler that decides what to keep, what to reduce, and what to discard entirely.</p> <p>The post <a href="https://towardsdatascience.com/coding-agents-dont-need-bigger-context-windows-they-need-a-context-compiler/">Coding Agents Don’t Need Bigger Context Windows — They Need a Context Compiler</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  6. Put the Agent Inside the Workflow

    Sat, 01 Aug 2026 13:00:00 -0000

    <p>A hybrid LLM application pattern that combines a predefined workflow with adaptive agent behavior</p> <p>The post <a href="https://towardsdatascience.com/put-the-agent-inside-the-workflow/">Put the Agent Inside the Workflow</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  7. The 3× Token Bill We Didn’t See Coming

    Fri, 31 Jul 2026 16:30:00 -0000

    <p>How a seemingly harmless move to a multi-agent architecture quietly tripled our LLM costs and what actually fixed it.</p> <p>The post <a href="https://towardsdatascience.com/the-3x-token-bill-we-didnt-see-coming/">The 3× Token Bill We Didn’t See Coming</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  8. When the Code Becomes the CEO: Why Your Next Manager Might Be a Decentralized Agentic Loop

    Fri, 31 Jul 2026 15:00:00 -0000

    <p>In five to ten years, the sharpest manager in your company might not be human, might not sleep, and might exist entirely in shared GPU memory. This is the systems-level view of the algorithmic corporation — why middle management collapses into a protocol, what breaks in the current AI stack, and what has to be built for autonomous agents to actually run a business.</p> <p>The post <a href="https://towardsdatascience.com/when-the-code-becomes-the-ceo-why-your-next-manager-might-be-a-decentralized-agentic-loop/">When the Code Becomes the CEO: Why Your Next Manager Might Be a Decentralized Agentic Loop</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  9. How to Debug AI Coding Agents When They Change the Wrong Thing

    Fri, 31 Jul 2026 13:30:00 -0000

    <p>A practical tutorial for recording model tool requests, real function results, patches, checks, screenshots, and a saved run log.</p> <p>The post <a href="https://towardsdatascience.com/how-to-debug-ai-coding-agents-when-they-change-the-wrong-thing/">How to Debug AI Coding Agents When They Change the Wrong Thing</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  10. How Benders Decomposition Works Part I: Optimality Cuts

    Fri, 31 Jul 2026 12:00:00 -0000

    <p>A friendly introduction to one of the most powerfull optimization techniques using the uncapacitated facility location problem</p> <p>The post <a href="https://towardsdatascience.com/how-benders-decomposition-works-part-i-optimality-cuts/">How Benders Decomposition Works Part I: Optimality Cuts</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  11. The Python Ecosystem That Changed AI Development

    Thu, 30 Jul 2026 16:30:00 -0000

    <p>How one open-source ecosystem made state-of-the-art AI accessible</p> <p>The post <a href="https://towardsdatascience.com/the-python-ecosystem-that-changed-ai-development/">The Python Ecosystem That Changed AI Development</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  12. How to Organize All of Your Coding Agent Tasks

    Thu, 30 Jul 2026 15:00:00 -0000

    <p>Optimise how you interact with your coding agents</p> <p>The post <a href="https://towardsdatascience.com/how-to-organize-all-of-your-coding-agent-tasks/">How to Organize All of Your Coding Agent Tasks</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  13. How to Build a Context Layer and a Company Brain

    Thu, 30 Jul 2026 14:00:00 -0000

    <p>What it actually takes to turn a company's scattered knowledge into something an LLM can reliably use — and why the demo is 5% of the work.</p> <p>The post <a href="https://towardsdatascience.com/how-to-build-a-context-layer-and-a-company-brain/">How to Build a Context Layer and a Company Brain</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  14. A Simplified View of the Jacobian Conjecture

    Thu, 30 Jul 2026 13:30:00 -0000

    <p>The full conjecture is stated over abstract fields, but the counterexample is a concrete 3D function that we can explain and visualize using familiar geometric ideas and a little algebra.</p> <p>The post <a href="https://towardsdatascience.com/a-simplified-view-of-the-jacobian-conjecture/">A Simplified View of the Jacobian Conjecture</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  15. How to Decode the Temperature Parameter in LLMs

    Thu, 30 Jul 2026 12:00:00 -0000

    <p>How statistical physics explains the transition from deterministic predictions to generative AI.</p> <p>The post <a href="https://towardsdatascience.com/decoding-the-temperature-parameter-in-llms/">How to Decode the Temperature Parameter in LLMs</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  16. Prompt Engineering Is Solved—Prompt Management Isn’t

    Wed, 29 Jul 2026 16:33:57 -0000

    <p>Prompt engineering helps you write better prompts—but it doesn’t help you change them safely. This article explores a common production failure where a simple variable rename breaks every live call, and introduces a lightweight static analysis tool that treats prompts like contracts, catching breaking changes before they ship.</p> <p>The post <a href="https://towardsdatascience.com/prompt-engineering-is-solved-prompt-management-isnt/">Prompt Engineering Is Solved—Prompt Management Isn’t</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  17. Why Your Best Predictive Model Gives the Wrong Treatment Effect

    Wed, 29 Jul 2026 15:00:00 -0000

    <p>Why prediction-driven variable selection misses confounders and how Bayesian Adjustment for Confounding attempts to fix it.</p> <p>The post <a href="https://towardsdatascience.com/why-your-best-predictive-model-gives-the-wrong-treatment-effect/">Why Your Best Predictive Model Gives the Wrong Treatment Effect</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  18. Los Movimientos, Part II: Solving Large Pickup-and-Delivery Problems with Adaptive Large Neighborhood Search

    Wed, 29 Jul 2026 13:30:00 -0000

    <p>Building an ALNS heuristic in Python for vehicle routing, time windows, capacity constraints, and mandatory driver breaks.</p> <p>The post <a href="https://towardsdatascience.com/los-movimientos-part-ii-solving-large-pickup-and-delivery-problems-with-adaptive-large-neighborhood-search/">Los Movimientos, Part II: Solving Large Pickup-and-Delivery Problems with Adaptive Large Neighborhood Search</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  19. Avoiding Entity Key Drift in a Data Lake: Step 1, Normalization

    Wed, 29 Jul 2026 12:00:00 -0000

    <p>This is the opening piece of a four-part deep dive series, on building a high-frequency streaming pipeline against a live public API. The data source is openSenseMap, a citizen-science IoT network used for climate research, mostly in Germany. A live public API is what makes it useful: it produces data-quality problems and edge cases that clean sample datasets never show. This article focuses on step-1: Normalization, later pieces cover matching algorithms, adaptive polling and noise filtering, and a vendor-agnostic Apache Iceberg pipeline with Terraform that runs locally in Docker and moves to AWS or GCP with minimal change.</p> <p>The post <a href="https://towardsdatascience.com/avoiding-entity-key-drift-in-a-data-lake-step-1-normalization/">Avoiding Entity Key Drift in a Data Lake: Step 1, Normalization</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  20. How Much Does a Local LLM Actually Cost to Run? I Measured Every Watt on Apple Silicon

    Tue, 28 Jul 2026 16:30:00 -0000

    <p>Five models, sustained generation, real wall-socket energy at $0.31/kWh — and the surprise the RTX-3090 numbers predicted, only bigger.</p> <p>The post <a href="https://towardsdatascience.com/how-much-does-a-local-llm-actually-cost-to-run-i-measured-every-watt-on-apple-silicon/">How Much Does a Local LLM Actually Cost to Run? I Measured Every Watt on Apple Silicon</a> appeared first on <a href="https://towardsdatascience.com">Towards Data Science</a>.</p>
  21. DeepSeek’s smaller model just outperformed its own flagship

    Mon, 03 Aug 2026 13:32:15 -0000

    <img width="1024" height="724" src="https://cdn.thenewstack.io/media/2026/06/0356053a-and-machines-2yclstfxice-unsplash-1024x724.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Abstract 3D digital cityscape with colorful gradient-filled geometric buildings in shades of blue, teal, magenta, yellow, and green, creating a futuristic data visualization landscape." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" fetchpriority="high" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/06/0356053a-and-machines-2yclstfxice-unsplash-scaled.jpg" /><p>DeepSeek has launched DeepSeek-V4-Flash-0731, delivering a significant boost in agent performance without changing the model&#8217;s core architecture. Following an announcement</p> <p>The post <a href="https://thenewstack.io/deepseek-v4-flash-open-weights/">DeepSeek&#8217;s smaller model just outperformed its own flagship</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    DeepSeek has launched V4-Flash-0731, using post-training to boost agent performance while keeping the same architecture and offering open weights.
  22. Kubernetes upgrades don’t have to break things: How EKS is making cluster lifecycle management simpler and safer

    Sat, 01 Aug 2026 15:00:00 -0000

    <img width="1024" height="683" src="https://cdn.thenewstack.io/media/2026/08/a8af7de9-philip-oroni-6wutbzpovhg-unsplash-1024x683.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Dark abstract digital render with undulating structures illuminated by red and teal rim light, representing complex cloud infrastructure." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/08/a8af7de9-philip-oroni-6wutbzpovhg-unsplash.jpg" /><p>Kubernetes moves at a pace of three minor version releases per year, and staying current is not optional if you</p> <p>The post <a href="https://thenewstack.io/eks-kubernetes-upgrade-rollback/">Kubernetes upgrades don’t have to break things: How EKS is making cluster lifecycle management simpler and safer</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Discover how AWS EKS simplifies Kubernetes upgrades with automated Upgrade Insights, 7-day Version Rollback, and AI-driven operations.
  23. Designing APIs for agents

    Sat, 01 Aug 2026 14:00:00 -0000

    <img width="1024" height="683" src="https://cdn.thenewstack.io/media/2026/08/9093472c-karolina-grabowska-7vfinjkygu0-unsplash-1024x683.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Dark abstract photo of tangled metallic ribbons and black faceted spheres representing complex AI agent API architecture." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/08/9093472c-karolina-grabowska-7vfinjkygu0-unsplash.jpg" /><p>In early 2025, Webflow started building for MCP before there was a clear playbook for agent-ready APIs. We publicly announced</p> <p>The post <a href="https://thenewstack.io/designing-apis-for-agents/">Designing APIs for agents</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Learn how Webflow redesigned its APIs for AI agents, moving from endpoint wrapping to intent-driven Model Context Protocol design.
  24. What Claude’s real-world breaches reveal about AI safety tests

    Sat, 01 Aug 2026 13:00:00 -0000

    <img width="1024" height="546" src="https://cdn.thenewstack.io/media/2021/11/2fd9b50d-doors-g7d6525ce3_1280-1024x546.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2021/11/2fd9b50d-doors-g7d6525ce3_1280.jpg" /><p>This week, just days after OpenAI announced that two of its advanced AI models had interacted with real-world systems during</p> <p>The post <a href="https://thenewstack.io/anthropic-claude-containment-failure/">What Claude’s real-world breaches reveal about AI safety tests</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Anthropic found three cases where Claude models escaped test sandboxes and compromised real systems, exposing why AI evaluation infrastructure needs production-grade security.
  25. Temporal 5x’d AI spend and doubled revenue. CEO Samar Abbas says he can’t prove they’re connected.

    Sat, 01 Aug 2026 10:30:00 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/08/40d6c49d-generated-image-1-1024x576.png" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Samar Abbas, Temporal&#039;s CEO" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/08/40d6c49d-generated-image-1.png" /><p>For the final two weeks of the year, Temporal clears its calendars. The company calls it a reading period: no</p> <p>The post <a href="https://thenewstack.io/temporal-ai-adoption-durable-execution/">Temporal 5x’d AI spend and doubled revenue. CEO Samar Abbas says he can’t prove they’re connected.</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Fresh off a $300 million round, Abbas turned Temporal into a test case for agentic AI, shipping features 20% to 30% faster. Whether that speed reaches customers as value, or the business is just growing alongside it, is what he can&#039;t yet answer.
  26. Forget humans “in” the loop. Harness engineering puts humans “on” the loop.

    Fri, 31 Jul 2026 17:18:13 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/a60d3ed7-osarugue-igbinoba-2-vgt1x9jbc-unsplash-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Abstract digital glitch art with distorted geometric diamond patterns on a black background, evoking an AI hallucination loop or system data corruption." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/a60d3ed7-osarugue-igbinoba-2-vgt1x9jbc-unsplash.jpg" /><p>AI has us quickly forgetting humans as the software delivery loop. Now, forget humans in the loop. For Thoughtworks&#8217; distinguished</p> <p>The post <a href="https://thenewstack.io/ai-agents-harness-engineering/">Forget humans “in” the loop. Harness engineering puts humans “on” the loop.</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Kief Morris explains how CI/CD and harness engineering keep AI-generated software safe and secure, production-ready and aligned with real-world user needs.
  27. Nscale just bought Anyscale. Here’s why it matters for multi-cloud neutrality.

    Fri, 31 Jul 2026 17:04:23 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/49f41857-eva-corbisier-pi4bgnllrrg-unsplash-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/49f41857-eva-corbisier-pi4bgnllrrg-unsplash-scaled.jpg" /><p>Cloud platform company Nscale announced this week a definitive agreement to acquire AI workload scaling specialist Anyscale, in a move</p> <p>The post <a href="https://thenewstack.io/nscale-anyscale-acquisition-neocloud-lockin/">Nscale just bought Anyscale. Here&#8217;s why it matters for multi-cloud neutrality.</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Nscale&#039;s Anyscale acquisition raises lock-in questions as the GPU neocloud builds what its CEO calls the first full-stack AI hyperscaler.
  28. Gemini Robotics 2 brings us one step closer to physical AGI

    Fri, 31 Jul 2026 15:56:51 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/7b9405b2-a-chosen-soul-tdpppqotzp0-unsplash-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/7b9405b2-a-chosen-soul-tdpppqotzp0-unsplash-scaled.jpg" /><p>This week, Google DeepMind revealed Gemini Robotics 2, an intelligence layer comprising three new models to power more adaptable physical</p> <p>The post <a href="https://thenewstack.io/gemini-robotics-2/">Gemini Robotics 2 brings us one step closer to physical AGI</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Google DeepMind’s three new models give robots full-body control, greater dexterity, and reasoning capabilities to execute multi-step tasks
  29. Why your company should (try to) build its own AI SRE

    Thu, 30 Jul 2026 20:30:56 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/7d594e6f-new-thumbnail-1024x576.png" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="In this episode of The New Stack podcast, Sam Farid and Nate Heinrich of Chronosphere argue that AI agents should also be used for root-cause analysis, helping teams diagnose failures more quickly as model capabilities continue to improve." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/7d594e6f-new-thumbnail.png" /><p>Companies ship more code today than ever, thanks to agentic coding tools. For product teams, this accelerated pace of development</p> <p>The post <a href="https://thenewstack.io/ai-sre-root-cause-analysis/">Why your company should (try to) build its own AI SRE</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Leaders at Chronosphere, a Palo Alto Networks company, say building an in-house AI SRE helps teams map systems, investigate incidents, and support reliable software delivery at scale.
  30. OpenAI slashes API costs amid rising global competition

    Thu, 30 Jul 2026 19:28:02 -0000

    <img width="1024" height="648" src="https://cdn.thenewstack.io/media/2026/07/efea7753-screenshot-2026-07-30-at-15.25.19-e1785439638411-1024x648.png" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Sam Altman in an OpenAI video released in October 2025." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/efea7753-screenshot-2026-07-30-at-15.25.19-e1785439638411.png" /><p>OpenAI has lowered API prices for two GPT-5.6 models only three weeks after their launch. On Thursday, the company announced</p> <p>The post <a href="https://thenewstack.io/gpt-5-6-api-price-cuts/">OpenAI slashes API costs amid rising global competition</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    <img width="1024" height="648" src="https://cdn.thenewstack.io/media/2026/07/efea7753-screenshot-2026-07-30-at-15.25.19-e1785439638411-1024x648.png" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Sam Altman in an OpenAI video released in October 2025." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/efea7753-screenshot-2026-07-30-at-15.25.19-e1785439638411.png" /> <p><strong>OpenAI has lowered API prices for two GPT-5.6 models</strong> only three weeks after their launch. On Thursday, the company announced that GPT-5.6 Luna is now 80% cheaper and GPT-5.6 Terra is 20% cheaper, while the price for its main reasoning model, GPT-5.6 Sol, stays the same.</p> <p>&#8220;Major price cuts today,&#8221; OpenAI CEO Sam Altman writes in a post on X published on Thursday. &#8220;We want to offer the best price/intelligence tradeoff at every level.&#8221;</p> <blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> <p>&#8220;We want to offer the best price/intelligence tradeoff at every level.&#8221;</p> </blockquote> <p>Luna now costs $0.20 for a million input tokens and $1.20 for a million output tokens, down from $1 and $6. Terra is priced at $2 per million input tokens and $12 per million output tokens, reduced from $2.50 and $15. Sol&#8217;s price stays at $5 per million input tokens and $30 per million output tokens.</p> <p>Developers using Luna do not need to change their processes, but their inference costs will go down. High-volume tasks will now be much cheaper to run, without requiring any code updates or model changes.</p> <figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x"><div class="wp-block-embed__wrapper"> <blockquote class="twitter-tweet" data-width="500" data-dnt="true"><p lang="en" dir="ltr">major price cuts today:<br><br>*80% drop for GPT-5.6 Luna, now $0.20 per million input tokens and $1.20 per million output<br>*20% drop for GPT-5.6 Terra, to $2/$12<br>*GPT-5.6 Sol gets Fast mode in the API, up to 2.5x the speed for 2x the price, same intelligence <a href="https://t.co/erC6u4VoDR" class="ext-link" rel="external nofollow" onclick="this.target=&#039;_blank&#039;;">pic.twitter.com/erC6u4VoDR</a></p>&mdash; Sam Altman (@sama) <a href="https://x.com/sama/status/2082880720989532597?ref_src=twsrc%5Etfw" class="ext-link" rel="external nofollow" onclick="this.target=&#039;_blank&#039;;">July 30, 2026</a></blockquote><script async src="https://platform.x.com/widgets.js" charset="utf-8"></script> </div></figure> <p><strong>This timing is unusual because AI vendors</strong> usually keep prices steady for several months after launching a new model family. OpenAI cut prices less than a month after <a href="https://thenewstack.io/openai-gpt-56-live/" class="local-link">GPT-5.6 became available on July 9</a>.</p> <blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> <p>&hellip;serving costs can be more important than small differences in benchmark performance between models.</p> </blockquote> <h2 class="wp-block-heading" id="h-infrastructure-gains-drive-savings">Infrastructure gains drive savings</h2> <p>The company says these price cuts were possible because of improvements to the infrastructure behind GPT-5.6, which lets the company offer &#8220;substantially more intelligence per dollar.&#8221;</p> <p>These infrastructure upgrades were expected, however. A day before the price announcement, OpenAI shared <a href="https://thenewstack.io/gpt-5-6-serving-efficiency/" class="local-link">an engineering overview that explained optimizations across the inference stack</a> for Codex and ChatGPT Work.</p> <h2 class="wp-block-heading" id="h-gpu-kernels-rewritten-for-efficiency">GPU kernels rewritten for efficiency</h2> <p>OpenAI engineers rewrote the production GPU kernels, cutting serving costs by about 20%. They also redesigned Sol&#8217;s speculative decoding system, making token generation over 15% more efficient. The company updated its agent runtime as well, reducing repeated prompt computation by using prompt caching more during multi-step workflows.</p> <h2 class="wp-block-heading" id="h-agents-amplify-inference-costs">Agents amplify inference costs</h2> <p>Lately, developers are paying more attention to inference costs since agents often make dozens or even hundreds of model calls to finish a single task. For these workloads, <a href="https://thenewstack.io/agentic-ai-token-costs/" class="local-link">serving costs can be more important than small differences in benchmark performance</a> between models.</p> <p>The elephant in the room is that the competition has intensified from overseas. Lower-cost open-weight models from Chinese AI companies like <a href="https://thenewstack.io/kimi-k3-inference-bottleneck/" class="local-link">Moonshot</a> are pushing commercial providers to show not just better performance, but also <a href="https://thenewstack.io/kimi-k3-open-weight-coding/" class="local-link">better pricing for production use</a>. OpenAI and Anthropic know that leaning on performance just isn&#8217;t an option anymore, which is pushing them to match Chinese prices.</p> <p id="h-the-issue-is-most-of-those-steps-don-t-need-a-model-like-sol-chinese-labs-have-figured-out-how-to-pack-better-capabilities-into-more-efficient-models-which-is-helpful-for-companies-running-through-billions-of-tokens-a-day-that-cost-difference-is-just-too-big-to-brush-off">The issue here is that most of those steps don&rsquo;t need a model like Sol, and Chinese labs have figured out how to pack better capabilities into efficient models; a helpful option for companies running through billions of tokens a day. </p> <p id="h-the-issue-is-most-of-those-steps-don-t-need-a-model-like-sol-chinese-labs-have-figured-out-how-to-pack-better-capabilities-into-more-efficient-models-which-is-helpful-for-companies-running-through-billions-of-tokens-a-day-that-cost-difference-is-just-too-big-to-brush-off">The ability to send the easy tasks to open models and save the pricey APIs for the tough stuff makes a difference; OpenAI is banking on its 80% price cut on Luna to narrow that gap. Suddenly, switching to self-hosted models doesn&rsquo;t look worth the hassle.</p> <h2 class="wp-block-heading" id="h-competition-reshapes-model-pricing">Competition reshapes model pricing</h2> <p>These pricing changes come as both OpenAI and Anthropic keep adjusting the economics of their newest model families &mdash; a dynamic that <a href="https://thenewstack.io/openai-spacexai-meta-price-war/" class="local-link">played out across three companies in a single week</a> earlier this month. Earlier this week, OpenAI <a href="https://thenewstack.io/sol-usage-limits-reset/" class="local-link">raised GPT-5.6 Sol usage limits</a> for ChatGPT Work and Codex after finding that long coding sessions used up allowances faster than expected. Anthropic has also <a href="https://thenewstack.io/opus-5-agentic-coding-cost/" class="local-link">made pricing changes and added premium inference tiers</a> as enterprise customers move bigger agentic workloads into production.</p> <p>This announcement highlights a trend in the industry for infrastructure. Now, every percentage point of serving efficiency can lead directly to lower API prices, turning cost optimization into a competitive advantage instead of just an engineering goal.</p> <p></p> <p>The post <a href="https://thenewstack.io/gpt-5-6-api-price-cuts/">OpenAI slashes API costs amid rising global competition</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
  31. AI-generated software is forcing yet another platform rethink

    Thu, 30 Jul 2026 19:09:47 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/2542aec3-getty-images-sjt82addq-4-unsplash-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="A lone figure in an orange spacesuit stands on a narrow platform amid floating, blurred digital screens and glowing data streams." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/2542aec3-getty-images-sjt82addq-4-unsplash-scaled.jpg" /><p>&#8220;Raise your hand if your team is actively using AI to write and review code. Now keep it up if</p> <p>The post <a href="https://thenewstack.io/ai-code-security-platforms/">AI-generated software is forcing yet another platform rethink</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    AI-written code is outpacing security controls, pushing platform teams toward AI bills of materials, runtime shields and faster, patchable platforms today.
  32. OpenAI and Elastic are tackling the AI problem enterprises can’t ignore

    Thu, 30 Jul 2026 18:42:32 -0000

    <img width="1024" height="681" src="https://cdn.thenewstack.io/media/2026/07/16611805-5010-xezwmxxlarw-unsplash-1024x681.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Low-angle view of dark glass office towers framing an overcast sky." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/16611805-5010-xezwmxxlarw-unsplash-scaled.jpg" /><p>It&#8217;s undeniable that enterprise AI has a context problem. Although frontier models are incredibly capable, if they can&#8217;t securely access</p> <p>The post <a href="https://thenewstack.io/openai-elastic-enterprise-context/">OpenAI and Elastic are tackling the AI problem enterprises can’t ignore</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    OpenAI and Elastic have deepened their partnership to give enterprise AI agents secure context, better observability, and quicker, evidence-based threat response.
  33. Why linting alone can’t govern agentic development

    Thu, 30 Jul 2026 15:00:00 -0000

    <img width="1024" height="683" src="https://cdn.thenewstack.io/media/2026/07/536f83d5-alex-shuper-y6ouxalmwew-unsplash-1024x683.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Dark abstract 3D digital architecture with massive glowing metallic structures, representing complex software systems." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/536f83d5-alex-shuper-y6ouxalmwew-unsplash.jpg" /><p>There&#8217;s no question that AI agents are changing software development. They can move from an idea to a working implementation</p> <p>The post <a href="https://thenewstack.io/governing-agentic-software-development/">Why linting alone can’t govern agentic development</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Linting alone can&#039;t govern agentic AI development. Learn how multi-layered verification keeps codebases secure and resilient.
  34. DNS is infrastructure. It’s time to manage it that way.

    Thu, 30 Jul 2026 15:00:00 -0000

    <img width="1024" height="683" src="https://cdn.thenewstack.io/media/2026/07/33db1920-arjay-bernardo-kvrt8ih1tau-unsplash-1024x683.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Close-up of overlapping bicycle frames and rear lights illuminated by intense red light." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/33db1920-arjay-bernardo-kvrt8ih1tau-unsplash-scaled.jpg" /><p>Attackers aren&#8217;t always the reason for DNS failures &#8212; they can often be something much more routine. For example, the</p> <p>The post <a href="https://thenewstack.io/dns-domain-management-automation/">DNS is infrastructure. It’s time to manage it that way.</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    DNSimple founder and CEO Anthony Eden explains how IaC, APIs and CLI automation can help prevent DNS failures and bring domain management under control.
  35. When do AI agents need permission boundaries?

    Thu, 30 Jul 2026 13:00:00 -0000

    <img width="1024" height="540" src="https://cdn.thenewstack.io/media/2026/07/a0f6a841-osarugue-igbinoba-eqscha021_q-unsplash-1024x540.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Monochrome abstract grid warped by a deep distortion, symbolizing structural tension and system boundaries." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/a0f6a841-osarugue-igbinoba-eqscha021_q-unsplash.jpg" /><p>An AI agent feels harmless when it only produces text, but the risk profile changes the moment it calls a</p> <p>The post <a href="https://thenewstack.io/ai-agent-permission-boundaries/">When do AI agents need permission boundaries?</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Tool access is production access. Learn how to secure AI agents with deterministic policies, schemas, and human approval gates.
  36. IBM says quantum computers are getting harder to verify. That’s progress.

    Thu, 30 Jul 2026 10:00:00 -0000

    <img width="1024" height="683" src="https://cdn.thenewstack.io/media/2026/07/6f7612cc-ibm_quantum_system_two_chandelier_detail_02-1024x683.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/6f7612cc-ibm_quantum_system_two_chandelier_detail_02-scaled.jpg" /><p>IBM and its partners say quantum computers are now getting to the point where they can run calculations that can&#8217;t</p> <p>The post <a href="https://thenewstack.io/ibm-quantum-advantage-verification/">IBM says quantum computers are getting harder to verify. That&#8217;s progress.</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    IBM says three experiments show quantum advantage over tested classical methods. But how can researchers trust results no classical computer can verify?
  37. OpenAI fixed GPT-5.6 Sol’s most frustrating flaw: Burning limits while it waits

    Wed, 29 Jul 2026 18:44:41 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2025/01/3d5432fc-storage-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Server room in a data center" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2025/01/3d5432fc-storage.jpg" /><p>OpenAI introduced GPT-5.6 Sol earlier this month as a model built for more demanding coding tasks. But it didn&#8217;t take</p> <p>The post <a href="https://thenewstack.io/sol-usage-limits-reset/">OpenAI fixed GPT-5.6 Sol’s most frustrating flaw: Burning limits while it waits</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    OpenAI reset ChatGPT Work and Codex usage limits after GPT-5.6 Sol burned through allowances faster than expected during agentic coding sessions.
  38. Anthropic backs urgent call for the most powerful AI labs to hit the brakes

    Wed, 29 Jul 2026 18:41:26 -0000

    <img width="1024" height="683" src="https://cdn.thenewstack.io/media/2023/12/a36c83ec-pexels-tara-winstead-8386440-1024x683.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Network with robotic arm" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2023/12/a36c83ec-pexels-tara-winstead-8386440.jpg" /><p>Less than a week after OpenAI disclosed that two experimental AI models escaped their testing environment during a cybersecurity exercise</p> <p>The post <a href="https://thenewstack.io/ai-pause-framework-letter/">Anthropic backs urgent call for the most powerful AI labs to hit the brakes</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    AI researchers and top lab executives sign open letter urging the U.S. to build a legal framework for slowing AI development before safety falls behind
  39. “The beast needs a cage”: Why PortSwigger’s agentic pentesting is kept safe behind bars

    Wed, 29 Jul 2026 18:34:54 -0000

    <img width="1024" height="768" src="https://cdn.thenewstack.io/media/2026/07/570bfd0c-getty-images-qo6wc5j4a8m-unsplash-1024x768.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/570bfd0c-getty-images-qo6wc5j4a8m-unsplash-scaled.jpg" /><p>As agentic services diversify across the entire enterprise technology stack, the rise of agentic coding tools is being challenged by</p> <p>The post <a href="https://thenewstack.io/burp-agentic-pentesting-control-layer/">&#8220;The beast needs a cage&#8221;: Why PortSwigger&#8217;s agentic pentesting is kept safe behind bars</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    PortSwigger launches Burp AT, agentic AI pentesting where agents propose actions but a deterministic control layer enforces scope and approval.
  40. OpenAI, Anthropic, and Cursor all localized pricing for India. Only two focused on value.

    Wed, 29 Jul 2026 18:30:55 -0000

    <img width="1024" height="768" src="https://cdn.thenewstack.io/media/2026/07/c357309e-bekeen-co-ftq7_gqanew-unsplash-1024x768.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Bekeen.co for Unsplash+: An illustration of India&#039;s flag" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/c357309e-bekeen-co-ftq7_gqanew-unsplash-scaled.jpg" /><p>Cursor is the latest AI company to target India with localized pricing, announcing on Tuesday a dedicated plan that sits</p> <p>The post <a href="https://thenewstack.io/cursor-anthropic-openai-india-pricing/">OpenAI, Anthropic, and Cursor all localized pricing for India. Only two focused on value.</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Anthropic&#039;s early effort resembles a currency conversion, while Cursor&#039;s move into the model layer is starting to look prudent. 
  41. Opus 5 vs. Fable 5: What does half the price buy?

    Wed, 29 Jul 2026 18:24:08 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/c15dceb4-54b7ab1d2c2521f83ae5d2da5f9d99321c370d24-2880x1620-1-1024x576.webp" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Claude Opus 5" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/c15dceb4-54b7ab1d2c2521f83ae5d2da5f9d99321c370d24-2880x1620-1-scaled.webp" /><p>Anthropic released Claude Opus 5 last week, with this pitch: It comes “close to the frontier intelligence of Claude Fable</p> <p>The post <a href="https://thenewstack.io/opus-5-vs-fable-5/">Opus 5 vs. Fable 5: What does half the price buy?</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Anthropic says its new Opus 5 comes close to Fable 5 at half the cost. I ran both on three reasoning tasks and tracked every dollar. Opus is better with facts, but Fable reads between the lines.
  42. The AI “vibe shift”: Why NanoClaw and Echo have teamed up to stop the next Hugging Face Breach

    Wed, 29 Jul 2026 16:00:00 -0000

    <img width="1024" height="556" src="https://cdn.thenewstack.io/media/2026/07/3dbc5db0-egor-komarov-swezl05imji-unsplash-1024x556.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Glitch-style collage of repeated red animal forms, broken by black horizontal bands and patches of cyan and pale pink." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/3dbc5db0-egor-komarov-swezl05imji-unsplash-scaled.jpg" /><p>When he&#8217;s asked about the intensifying contest between rapidly advancing AI attackers and the software defenses meant to contain them,</p> <p>The post <a href="https://thenewstack.io/nanoclaw-echo-agent-runtime/">The AI &#8220;vibe shift&#8221;: Why NanoClaw and Echo have teamed up to stop the next Hugging Face Breach</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    NanoClaw and Echo have launched a hardened AI agent runtime that secures browsers, tools and libraries while continuously patching known software vulnerabilities.
  43. “Stateful systems are incredibly hard to build”: How Perplexity thinks about AI agent sandboxes

    Wed, 29 Jul 2026 15:30:00 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/1362eeb5-tsd-studio-ydarxoa1usm-unsplash-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="" style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/1362eeb5-tsd-studio-ydarxoa1usm-unsplash-scaled.jpg" /><p>Sandboxes for AI agents may feel like a solved problem. After all, projects like&#160;Firecracker, the open-source microVM technology AWS built</p> <p>The post <a href="https://thenewstack.io/perplexity-space-agent-sandboxes/">“Stateful systems are incredibly hard to build”: How Perplexity thinks about AI agent sandboxes</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Perplexity infrastructure VP Nate Kupp tells The New Stack how SPACE keeps its millions of agent sandboxes durable, portable, and forkable across clusters.
  44. Turning 10x developers into 10x value

    Wed, 29 Jul 2026 14:00:00 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/7da9ba8e-kamran-abdullayev-sqpgpfiwixe-unsplash-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Dark abstract digital architectural structure representing enterprise software infrastructure and AI governance pipelines." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/7da9ba8e-kamran-abdullayev-sqpgpfiwixe-unsplash.jpg" /><p>When I sit down with leaders and ask why they&#8217;re investing in AI, the answer almost always comes back to</p> <p>The post <a href="https://thenewstack.io/building-the-10x-organization/">Turning 10x developers into 10x value</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    AI coding tools won&#039;t transform delivery alone. Discover why mature engineering platforms are key to unlocking true 10x value.
  45. Your team isn’t “ignoring security.” They’re just underwater.

    Wed, 29 Jul 2026 14:00:00 -0000

    <img width="1024" height="556" src="https://cdn.thenewstack.io/media/2026/07/851e8d95-egor-komarov-9kndef3kkbm-unsplash-1024x556.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Abstract digital glitch pattern with fragmented red, pink and cyan blocks, scattered letters and numbers against a black background." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/851e8d95-egor-komarov-9kndef3kkbm-unsplash-scaled.jpg" /><p>A cloud security finding becomes useful only when someone decides what matters, assigns an owner, and follows it through. For</p> <p>The post <a href="https://thenewstack.io/cloud-security-triage-cadence/">Your team isn’t &#8220;ignoring security.&#8221; They’re just underwater.</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    Cloud security tools generate findings, but a recurring triage cadence, clear ownership and business context help teams turn alerts into remediation today.
  46. Kernel of truth: GPT-5.6 Sol can cut its own costs, says OpenAI

    Wed, 29 Jul 2026 13:04:39 -0000

    <img width="1024" height="576" src="https://cdn.thenewstack.io/media/2026/07/7a85f94c-osarugue-igbinoba-ub1yykxmdoa-unsplash-1024x576.jpg" class="webfeedsFeaturedVisual wp-post-image wp-stateless-item" alt="Abstract red-and-black pattern of dense, irregular clusters resembling swirling smoke or tangled organic forms." style="display: block; margin: auto; margin-bottom: 20px;max-width: 100%;" link_thumbnail="" decoding="async" loading="lazy" data-image-size="large" data-stateless-media-bucket="cdn.thenewstack.io" data-stateless-media-name="media/2026/07/7a85f94c-osarugue-igbinoba-ub1yykxmdoa-unsplash-scaled.jpg" /><p>OpenAI has detailed how the GPT-5.6 model family balances capability and cost across its stack, and the company‘s most important claim is a</p> <p>The post <a href="https://thenewstack.io/gpt-5-6-serving-efficiency/">Kernel of truth: GPT-5.6 Sol can cut its own costs, says OpenAI</a> appeared first on <a href="https://thenewstack.io">The New Stack</a>.</p>
    OpenAI says GPT-5.6 Sol cut serving costs and tokens by optimizing kernels, inference, AI APIs and Codex’s agent harness for faster tool-calling workflows.
  47. Staff Software Engineer

    Tue, 30 Jun 2026 16:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Choosing the threshold of an alert policy can be a headache. You have to analyze historical data, aggregate it into semantically meaningful time series, and choose a threshold that matters. If the workload grows, your previously set static threshold might become too low, and your alert might fire too frequently. New workloads might require setting new thresholds, and setting separate thresholds for separate workloads requires creating separate policies, resulting in the annoyance of managing a fleet of mostly similar policies.</span></p> <p><span style="vertical-align: baseline;">Not to mention, some metrics can’t even be alerted on using static thresholds. If your metric varies by time of day, like many e-commerce metrics do, then no single threshold will work. For example, what do you do if your metric looks like this:</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/qtfse9nqWC88b92.max-1000x1000.png" alt="qtfse9nqWC88b92"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Clearly something went wrong in the middle of that chart… but because the anomalous value is within the normal range of the daily data, no static value threshold can ever catch it.</span></p> <h3><strong style="vertical-align: baseline;">Introducing long lookbacks and dynamic thresholding</strong></h3> <p><span style="vertical-align: baseline;">We are pleased to announce that this problem is now solvable for users of </span><a href="https://docs.cloud.google.com/monitoring/alerts"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Monitoring alerts</span></a><span style="vertical-align: baseline;"> with the launch of </span><a href="https://docs.cloud.google.com/monitoring/alerts/using-promql#promql-2years"><span style="text-decoration: underline; vertical-align: baseline;">long-lookback alert policies for PromQL</span></a><span style="vertical-align: baseline;">, currently in preview. This highly requested feature update now lets you configure PromQL alert policies to run over two years of metric data stored in Cloud Monitoring, supporting year-over-year and quarter-over-quarter analysis. </span></p> <p><span style="vertical-align: baseline;">One major use case unlocked by two-year lookback horizons in PromQL is dynamic thresholding, that is, policies where the threshold refers to the metric’s history. A simple example is an alert policy that says “alert me if the average over the last 5 minutes is 2x more than the average over the last week.” Instead of setting a static number as your threshold, you set how anomalous each time series must be from its historical data before generating an alert. This allows flexibility in policies, supports naturally changing baselines caused by growth in workloads, and provides a single threshold that works for all workloads. You don’t have to analyze every time series to set alerts properly – just set a factor that signals “anomalous” to you.</span></p> <p><span style="vertical-align: baseline;">Take the above example: To catch that anomaly, you might create a policy that says “alert me if the value over the last 5 minutes is lower than 70% of the value from the same 5-minute span one week ago.” Such a policy would create a threshold that varies by the time of day, and you would catch the anomalous drop:</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/8JX8WREHZPq68Fc.max-1000x1000.png" alt="8JX8WREHZPq68Fc"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Dynamic threshold algorithms</strong></h3> <p><span style="vertical-align: baseline;">Choosing the right dynamic threshold algorithm in PromQL depends on the shape of your source data. Metrics that vary by time of day need a different algorithm than metrics that have little variation. </span></p> <p><span style="vertical-align: baseline;">You can rewrite the below examples to have the historical data query as your threshold (putting a metric after the &lt; or &gt;), but if you do so you can’t easily visualize the threshold.</span></p> <p><span style="vertical-align: baseline;">Because these use historical data, granular alert policies that trigger on individual workloads instead of aggregates might be flaky when spinning up new workloads. This issue will resolve itself as you accrue historical data. You can also avoid this by only running dynamic threshold alerts on aggregates.</span></p> <p><strong style="vertical-align: baseline;">Moving averages<br/></strong><span style="vertical-align: baseline;">In</span><span style="vertical-align: baseline;"> the simplest of the algorithms, alerts trigger when the recent trend of the data deviates from a moving average of data over a long period of time. This is good for catching anomalies in relatively stable data. </span></p> <p><span style="vertical-align: baseline;">Here’s some example PromQL, comparing the last 5 minutes to a one-week baseline and alerting if it’s 30% higher or lower than average:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;sum(rate(http_requests_total[5m])) /\r\nsum(rate(http_requests_total[1w]))\r\n &gt; 1.3\r\nOR\r\nsum(rate(http_requests_total[5m])) /\r\nsum(rate(http_requests_total[1w]))\r\n &lt; .7&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3b7a7a00&gt;)])]&gt;</dd> </dl></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/4v9HQ8snDJbP2oR.max-1000x1000.png" alt="4v9HQ8snDJbP2oR"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">You can also write this as a direct comparison, which might be more understandable. The following says “alert me if the most recent 5 minutes average of data is &gt;1.3x the weekly average.”:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;sum(rate(http_requests_total[5m])) &gt; 1.3 * sum(rate(http_requests_total[1w]))&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3b7a7fd0&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><strong style="vertical-align: baseline;">Z-score (standard deviation)<br/></strong><span style="vertical-align: baseline;">Use this algorithm to identify anomalies based on the average and standard deviation of your data. A </span><a href="https://en.wikipedia.org/wiki/Standard_score" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">z-score</span></a><span style="vertical-align: baseline;"> measures the statistical distance between your recent data and historical data, with a common threshold being that a z-score above three or below negative three is considered anomalous. This measures the volatility of your data compared to its usual noisiness, and it works best with data that has a stable average and decent volatility:</span></p> <p><span style="vertical-align: baseline;">Example PromQL, comparing the last 5 minutes to the one-week average and standard deviation:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;abs(\r\nsum(rate(http_requests_total[5m]))\r\n-\r\nsum(rate(http_requests_total[1w]))\r\n)\r\n/\r\nstddev_over_time(sum(rate(http_requests_total[5m]))[1w:5m])\r\n&gt; 3&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3b7a7eb0&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Example z-score signal and the resulting anomaly detection threshold:</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/image1_VFrHPBv.max-1000x1000.png" alt="image1"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><strong style="vertical-align: baseline;">Seasonal decomposition (time offset comparison)<br/></strong><span style="vertical-align: baseline;">This is a simple time-offset algorithm that compares time-series data in a period of time to the same period from the previous day or week. This is ideal for metrics that have timely patterns associated with them, such as visitors to a website that vary by time of day and day of week. Holidays and other factors that might cause a given day to be lower than expected can be smoothed away by averaging more than one historical period (e.g., average one week ago, two weeks ago, and three weeks ago, then compare that average to today).</span></p> <p><span style="vertical-align: baseline;">Example PromQL, comparing the last 5 minutes to the same time period yesterday, alerting if the recent data is more than 50% lower than the one-day offset data:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;sum(rate(http_requests_total[5m])) /\r\n sum(rate(http_requests_total[5m] offset 1d))\r\n &lt; .5&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3b7a7b80&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Which can be algebraically rewritten to: </span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;sum(rate(http_requests_total[5m])) &lt; .5 * sum(rate(http_requests_total[5m] offset 1d))&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3b7a7070&gt;)])]&gt;</dd> </dl></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/Bkby4f9LySHuz75.max-1000x1000.png" alt="Bkby4f9LySHuz75"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">In production, you might want to compare to the same period one week ago, or compare to an average of the same period one and seven days ago, to avoid triggering on naturally lower days such as weekends and holidays:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;sum(rate(http_requests_total[5m])) /\r\n ((\r\n sum(rate(http_requests_total[5m] offset 1d)) + sum(rate(http_requests_total[5m] offset 7d)) \r\n ) / 2)\r\n &lt; .5&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3b7a7ee0&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">When using time offsets, you can only reliably trigger on either drops or spikes, as triggering on both sudden drops and sudden spikes in a single policy may cause your alerts to fire twice.</span></p> <p><span style="vertical-align: baseline;">Think of it this way: If traffic drops steeply today, your alert will trigger immediately. However, exactly 24 hours later, today's anomalous drop becomes tomorrow's historical baseline. If your policy triggers on any anomalous difference (higher or lower), the sudden "return to normal" tomorrow will look like a massive spike relative to yesterday's dip, and you will get a false alert for a phantom anomaly. You can see this in the above chart — the dip in the signal (blue line) reappears as its reciprocal exactly 24 hours later.</span></p> <p><span style="vertical-align: baseline;">To prevent this, you should only track either drops or spikes when monitoring any given metric.</span></p> <h3><strong style="vertical-align: baseline;">Control runaway costs using dynamic thresholds</strong></h3> <p><span style="vertical-align: baseline;">Once you can trigger an alert based on deviations from a historical baseline, many interesting use cases open up. For example, you can use dynamic thresholding to prevent overspend for any Google Cloud service that offers a metric that roughly tracks spend.</span></p> <p><span style="vertical-align: baseline;">Say you are concerned about runaway AI token costs. You could do the following:</span></p> <ul> <li style="list-style-type: none;"> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Configure a dynamic threshold alert that triggers if the most recent 10 minutes of accumulated input/output token usage is more than 25x the one-week historical average, which should only catch extreme anomalous scenarios (such as leaked API keys) that will definitely result in overspend:</span></p> <ul style="list-style-type: circle;"> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;"> </span><code style="vertical-align: baseline;">sum(rate({"__name__"="aiplatform.googleapis.com/publisher/online_serving/<br/>token_count"}[10m])) &gt; <br/></code><code style="vertical-align: baseline;">25 * sum(rate({"__name__"="aiplatform.googleapis.com/publisher/online_serving/<br/>token_count"}[1w]))</code></p> </li> </ul> </li> </ul> </li> </ul> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Trigger your alert to fire to a </span><a href="https://docs.cloud.google.com/monitoring/support/notification-options#pubsub"><span style="text-decoration: underline; vertical-align: baseline;">Pub/Sub notification channel</span></a><span style="vertical-align: baseline;"> that pushes notifications to a </span><a href="https://docs.cloud.google.com/run/docs/functions/overview"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Run function</span></a><span style="vertical-align: baseline;">.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">That Cloud Run function then runs a workflow that uses the </span><a href="https://docs.cloud.google.com/docs/quotas/api-overview"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Quotas API</span></a><span style="vertical-align: baseline;"> to lower your Token Usage quota to 0, which immediately stops the overspend. Note that legitimate use of tokens will be paused until you can fix the problem… but at least you’ll stop the bleeding.</span></p> </li> </ul> <h3><strong style="vertical-align: baseline;">Sign up to be a design partner</strong></h3> <p><span style="vertical-align: baseline;">We are working on productizing anomaly detection using dynamic thresholds so they’re easier to write. We’re also working on more complex anomaly detection algorithms in Cloud Monitoring alerting that uses AI models specifically trained on time-series data.</span></p> <p><span style="vertical-align: baseline;">If you’re interested in sharing your thoughts and being an early adopter of what we’re building in this space, </span><a href="https://docs.google.com/forms/d/e/1FAIpQLScb6eWg79EBIMYvb4wk38x0xj7_HLdGbDSDUsruAqk9qlFXVA/viewform?usp=publish-editor" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">sign up to be a preview partner</span></a><span style="vertical-align: baseline;">. We’d love to have you!</span></p></div>
  48. Staff software engineer

    Fri, 26 Jun 2026 16:30:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Traditional alerting systems often force a compromise: you can either alert immediately on simple, noisy log events, or monitor rigid, pre-configured metrics that fail when faced with data with many unique answers like user sessions or IP addresses. But the most critical system issues — like a 20% spike in error rates for a specific customer or a latency anomaly correlated with database timeouts — are hidden in the aggregates and relationships between these signals.</span></p> <p><span style="vertical-align: baseline;">Recently, </span><a href="https://cloud.google.com/blog/products/management-tools/query-logs-and-traces-with-sql-in-observability-analytics"><span style="text-decoration: underline; vertical-align: baseline;">we announced</span></a><span style="vertical-align: baseline;"> that you can now use SQL to query logs and traces in </span><a href="https://docs.cloud.google.com/stackdriver/docs/observability/analytics"><span style="text-decoration: underline; vertical-align: baseline;">Observability Analytics</span></a><span style="vertical-align: baseline;"> (formerly Log Analytics). But the story gets better. You can also use SQL to create alerts</span><strong style="vertical-align: baseline;"> </strong><span style="vertical-align: baseline;">in Observability Analytics. By bringing SQL directly to your alerting engine, you can write complex analytical queries over logs and traces and turn them into alerts. Whether you need to calculate error percentages, analyze high-cardinality dimensions, or JOIN logs and traces, SQL alerting helps you go from basic threshold monitoring to deep, contextual detection that goes beyond the capabilities of traditional alerting systems. SQL alerting is now in preview.</span></p></div> <div class="block-paragraph_with_image"><div class="article-module h-c-page"> <div class="h-c-grid uni-paragraph-wrap"> <div class="uni-paragraph h-c-grid__col h-c-grid__col--8 h-c-grid__col-m--6 h-c-grid__col-l--6 h-c-grid__col--offset-2 h-c-grid__col-m--offset-3 h-c-grid__col-l--offset-3"> <figure class="article-image--wrap-small " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/sql_alert_image_for_blog_post_pEYZzMK.max-1000x1000.png" alt="image1"> </a> </figure> <h3 data-block-key="0z292"><b>How SQL-based alerting works</b></h3><p data-block-key="8emhk">SQL alerting in Observability Analytics is available as part of <a href="https://cloud.google.com/monitoring">Cloud Monitoring</a>. An alerting policy runs your SQL query on a schedule you define (for example, every 10 minutes). It automatically applies a "lookback window" to your query, so it only analyzes the log entries or trace spans it received since the last time it ran.</p><p data-block-key="bhic1">If the results of your query meet the condition you set, Cloud Monitoring creates an incident and sends a notification to your chosen channels, like email, Slack, or PagerDuty.</p><p data-block-key="6ev36">Please note that because SQL-based alerting uses BigQuery to process telemetry data, query executions are billed through BigQuery under your standard on-demand pricing or BigQuery reservations.</p><h3 data-block-key="djqid"><b>Two ways to trigger an alert</b></h3><p data-block-key="dgotc">You can choose between two types of alert conditions.</p><ol><li data-block-key="2riqv"><b>Row count threshold:</b> This is the simplest option. The alert fires if your query returns a number of rows that is greater than, equal to, or less than a threshold you set. This is perfect for "alert me if more than 10 users have failed logins" scenarios.</li><li data-block-key="dd7g2"><b>Boolean:</b> This is the most powerful option. The alert fires if your query returns <i>any</i> row where a specific column you define has a value of true. This lets you build complex logic, like calculating percentages, directly in your SQL query.</li></ol><p data-block-key="5mt49"><b>Example 1: Alerting on payment gateway failures (row count)</b></p><p data-block-key="8lv89"><b>Scenario:</b> Imagine that you’re an e-commerce operator, and you want to be alerted immediately if your payment gateway is experiencing systemic outages, while ignoring occasional, normal card declines (like an incorrect PIN).</p><p data-block-key="fdk7o">To do this, you can write a query to filter for log entries indicating gateway timeouts, and use a row count threshold to trigger the alert only if the volume of these errors spikes.</p> </div> </div> </div> </div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &quot;SELECT\r\n JSON_VALUE(json_payload.transaction_id) AS transaction_id,\r\n JSON_VALUE(json_payload.error_code) AS error_code\r\nFROM\r\n `my-project-id.my-dataset.my-log-view`\r\nWHERE\r\n JSON_VALUE(json_payload.status) = &#x27;FAILED&#x27;\r\n -- Filter for systemic gateway issues, not user-input errors like WRONG_PIN\r\n AND JSON_VALUE(json_payload.failure_reason) = &#x27;GATEWAY_TIMEOUT&#x27;&quot;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea40cbef40&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><strong style="vertical-align: baseline;">Alert configuration:</strong></p> <ul> <li role="presentation"><span style="vertical-align: baseline;">Condition type: Row count threshold</span></li> <li role="presentation"><span style="vertical-align: baseline;">Trigger condition: Fired when row counts greater than (</span><code style="vertical-align: baseline;">&gt;</code><span style="vertical-align: baseline;">) 10</span></li> <li role="presentation"><span style="vertical-align: baseline;">Evaluation window / lookback: 5 minutes (checks the last 5 minutes of data on your defined schedule)</span></li> </ul> <p><strong style="vertical-align: baseline;">Example 2: Alerting on agent latency (traces)</strong></p> <p><strong style="vertical-align: baseline;">Scenario: </strong><span style="vertical-align: baseline;">You’re an AI platform engineer, and you want to ensure your multi-step AI agents are responding within acceptable time limits. You want to monitor the 99th percentile (p99) latency of the orchestrator service and get alerted if performance degrades.</span></p> <p><span style="vertical-align: baseline;">To do this, you can write a SQL query against your trace data that calculates the p99 latency for all services and returns </span><span style="vertical-align: baseline;">true</span><span style="vertical-align: baseline;"> if your </span><span style="vertical-align: baseline;">agent-orchestrator</span><span style="vertical-align: baseline;"> exceeds 5 seconds (5000 milliseconds).</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;WITH latency_data AS (\r\n SELECT\r\n APPROX_QUANTILES(duration_nano, 100)[OFFSET(99)] / 1000000 AS p99_ms\r\n FROM\r\n `my-project-id.us._Trace.Spans._AllSpans`\r\n WHERE\r\n -- Examine rows produced by the agent-orchestrator\r\n JSON_VALUE(resource.attributes, \&#x27;$.&quot;service.name&quot;\&#x27;) = \&#x27;agent-orchestrator\&#x27;\r\n GROUP BY\r\n service_name\r\n)\r\nSELECT\r\n &quot;agent-orchestrator&quot; AS service_name,\r\n p99_ms,\r\n -- Boolean logic: Alert if p99 exceeds 5000ms\r\n (p99_ms &gt; 5000) AS has_latency_spike\r\nFROM\r\n latency_data&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea40cbe820&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><strong style="vertical-align: baseline;">Alert configuration:</strong></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Condition type: Boolean</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Target column: </span><span style="vertical-align: baseline;">has_latency_spike</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Trigger condition: Fired when the query returns any row where this column evaluates to true.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Evaluation window / lookback: 10 minutes (or your preferred scheduling interval)</span></p> </li> </ul> <h3><strong style="vertical-align: baseline;">Before you begin</strong></h3> <p><span style="vertical-align: baseline;">Before you can create a SQL-based alert, you need to set up a few things:</span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Analytics enabled:</strong></p> </li> <ul> <li aria-level="2" style="list-style-type: circle; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">For </span><strong style="vertical-align: baseline;">logs</strong><span style="vertical-align: baseline;">: </span><a href="https://docs.cloud.google.com/logging/docs/buckets#upgrade-bucket"><span style="text-decoration: underline; vertical-align: baseline;">Upgrade</span></a><span style="vertical-align: baseline;"> your log bucket to use Observability Analytics (if not already updated).</span></p> </li> <li aria-level="2" style="list-style-type: circle; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">For </span><strong style="vertical-align: baseline;">traces</strong><span style="vertical-align: baseline;">: Cloud Trace must be collected and stored in your project.</span></p> </li> </ul> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Linked BigQuery dataset:</strong><span style="vertical-align: baseline;"> Create a linked BigQuery dataset for the telemetry source (either the </span><a href="https://docs.cloud.google.com/logging/docs/buckets#link-bq-dataset"><span style="text-decoration: underline; vertical-align: baseline;">log bucket</span></a><span style="vertical-align: baseline;"> or the </span><a href="https://docs.cloud.google.com/trace/docs/analytics-query-linked-dataset#link-bq-dataset"><span style="text-decoration: underline; vertical-align: baseline;">trace dataset</span></a><span style="vertical-align: baseline;">). SQL-based alerts query the data through this BigQuery link.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">IAM permissions:</strong></p> </li> <ul> <li aria-level="2" style="list-style-type: circle; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Grant the IAM roles necessary to create an SQL-based alert policy: </span><a href="https://docs.cloud.google.com/iam/docs/roles-permissions/monitoring#monitoring.alertPolicyEditor"><span style="text-decoration: underline; vertical-align: baseline;">Monitoring AlertPolicy Editor</span></a><span style="vertical-align: baseline;"> and </span><a href="https://docs.cloud.google.com/iam/docs/roles-permissions/logging#logging.sqlAlertWriter"><span style="text-decoration: underline; vertical-align: baseline;">Logging SqlAlert Writer</span></a><span style="vertical-align: baseline;"> (applies to both log and trace alerts).</span></p> </li> </ul> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Notification channels:</strong><span style="vertical-align: baseline;"> </span><a href="https://docs.cloud.google.com/monitoring/support/notification-options"><span style="text-decoration: underline; vertical-align: baseline;">Configure the notification channels</span></a><span style="vertical-align: baseline;"> (like email or Slack) where you want to receive alerts.</span></p> </li> </ol> <h3><strong style="vertical-align: baseline;">How to create your alert</strong></h3> <p><span style="vertical-align: baseline;">Creating a </span><a href="https://docs.cloud.google.com/logging/docs/analyze/sql-in-alerting"><span style="text-decoration: underline; vertical-align: baseline;">sql-based alert policy</span></a><span style="vertical-align: baseline;"> is straightforward:</span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Navigate to </span><strong style="vertical-align: baseline;">Observability Analytics</strong><span style="vertical-align: baseline;"> in the Google Cloud console.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Compose and validate your SQL query.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Select the </span><strong style="vertical-align: baseline;">Run on BigQuery</strong><span style="vertical-align: baseline;"> query engine in the UI.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Click the </span><strong style="vertical-align: baseline;">Create alert</strong><span style="vertical-align: baseline;"> button from the results toolbar.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Define your condition (row count or boolean) and your evaluation schedule.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Add your notification channels, give your alert a clear name, and click </span><strong style="vertical-align: baseline;">Save</strong><span style="vertical-align: baseline;">.</span></p> </li> </ol> <p><span style="vertical-align: baseline;">For</span><strong style="vertical-align: baseline;"> </strong><span style="vertical-align: baseline;">Infrastructure as Code (IaC) pipelines, you can also configure alerts via the </span><a href="https://docs.cloud.google.com/monitoring/alerts/manage-alerts-terraform"><span style="text-decoration: underline; vertical-align: baseline;">API</span></a><span style="vertical-align: baseline;"> and </span><a href="https://docs.cloud.google.com/monitoring/alerts/manage-alerts-terraform"><span style="text-decoration: underline; vertical-align: baseline;">Terraform</span></a><span style="vertical-align: baseline;">.</span></p> <h3><strong style="vertical-align: baseline;">Get started</strong></h3> <p><span style="vertical-align: baseline;">Ready to build more powerful, insightful alerts? Open the </span><a href="https://console.cloud.google.com/logs/analytics"><span style="text-decoration: underline; vertical-align: baseline;">Observability Analytics</span></a><span style="vertical-align: baseline;"> page in the console and try writing your first SQL query today. You can find more details and advanced examples in the </span><a href="https://docs.cloud.google.com/logging/docs/analyze/sql-in-alerting"><span style="text-decoration: underline; vertical-align: baseline;">official documentation</span></a><span style="vertical-align: baseline;">.</span></p></div>
  49. Distinguished Site Reliability Engineer

    Thu, 28 May 2026 16:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Since its inception over 20 years ago, Google has used </span><a href="https://sre.google/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Site Reliability Engineering (SRE)</span></a><span style="vertical-align: baseline;"> to keep services like Search, Gmail, Maps, YouTube and Google Cloud reliable and highly available, adhering to the </span><a href="https://sre.google/sre-book/table-of-contents/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">principles</span></a><span style="vertical-align: baseline;"> and </span><a href="https://sre.google/workbook/table-of-contents/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">practices</span></a><span style="vertical-align: baseline;"> of the reliability-first mindset.</span></p> <p><span style="vertical-align: baseline;">Recently though, the emergence of AI has driven multiple step-changes in system complexity. Interactions between components are now more complicated due to a variety of factors:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">With microservice architectures, systems are distributed across wider geographical locations and data centers that have greater hardware diversity. </span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Enterprise cloud products offer an extensive array of capabilities with an incredibly complex set of products. </span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Google services now cover more unique business and regulatory requirements, making the overall topology and taxonomy much more complex and difficult to understand, a challenge amplified by the constant stream of system changes resulting from continuous deployment pipelines. </span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">AI code generation capabilities have enabled software developers to deliver orders of magnitude more code, resulting in more opportunities to introduce reliability issues.</span></p> </li> </ul> <p><span style="vertical-align: baseline;">While AI is in some ways making the SRE team’s work more challenging, it also provides new ways to understand and improve software development lifecycles, including production operations. Google SRE is on the path to fully adopt AI and agentic technologies, </span><span style="vertical-align: baseline;">leveraging AI as a force multiplier while also </span><span style="vertical-align: baseline;">maintaining control</span><span style="vertical-align: baseline;">. We call this SRE AI. </span></p> <p><span style="vertical-align: baseline;">Read on for a summary of considerations when thinking about this topic, or you can dive straight into our comprehensive whitepaper, </span><a href="https://goo.gle/4uUxy4y" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">AI in SRE Practice: Moving Beyond Automation at Google</span></a><span style="vertical-align: baseline;">, for an in-depth look at how Google SRE is navigating the transition from deterministic automation to agentic AI</span><span style="vertical-align: baseline;">.</span></p> <h3><span style="vertical-align: baseline;">The SRE AI opportunity landscape</span></h3> <p><span style="vertical-align: baseline;">To help </span><span style="vertical-align: baseline;">define our SRE AI strategy, we considered the overall software development lifecycle (SDLC) for areas of opportunity.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/image1_3Jp6s6J.max-1000x1000.png" alt="image1"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">The above diagram shows each of the phases where SRE is involved, and that could be improved with SRE AI. </span></p> <p><span style="vertical-align: baseline;">Perhaps the most obvious SRE area that could benefit from agentic AI is </span><strong style="vertical-align: baseline;">investigation and mitigation</strong><span style="vertical-align: baseline;">, sometimes referred to as root cause analysis (RCA), a cornerstone of the traditional SRE discipline. But RCA is by no means the whole SRE AI. Our plans for SRE AI go far beyond RCA and troubleshooting, and address the entire SDLC. Here are a few areas we are working on:</span></p> <h2><strong style="vertical-align: baseline;">Reliability design</strong></h2> <p><span style="vertical-align: baseline;">SRE has been working on the policies, tooling and procedures you need to ensure reliability is an integral part of system design through the design, launch, and deployment phases. An agentic approach does not necessarily imply removing people from the process, specifically for higher-risk services and features, but it does significantly reduce the time people need to spend, as a number of issues can be detected and auto-addressed before they need to be reviewed by a person.</span></p> <p><span style="vertical-align: baseline;">Runbooks (playbooks) and other documentation to be used during incidents are important production artifacts. Google SRE has developed AI agents to continuously monitor and improve playbooks and production documentation based on their usage during incidents. AI agents can also generate new playbooks from incidents.</span></p> <h2><strong style="vertical-align: baseline;">Anomaly detection and alerting </strong></h2> <p><span style="vertical-align: baseline;">A core SRE practice is to define </span><a href="https://cloud.google.com/blog/products/devops-sre/sre-fundamentals-sli-vs-slo-vs-sla?e=48754805"><span style="text-decoration: underline; vertical-align: baseline;">service level indicators (SLIs) and service level objectives (SLOs)</span></a><span style="vertical-align: baseline;">, and to configure alerts for them. This approach tends to be ok if service use cases are fairly uniform, and if it is possible to define objectives that align to customers' expectations. </span></p> <p><span style="vertical-align: baseline;">However, for products that support a range of customer use cases and workloads, like many in Google Cloud, it can be difficult to define a static threshold that works across a variety of workloads. With AI, Google SRE is augmenting our more traditional approaches with </span><strong style="vertical-align: baseline;">anomaly detection</strong><span style="vertical-align: baseline;">, with alerts based on detecting anomalies in regular behavior rather than statically predefined thresholds. This approach relies on agents to collect signals and feed them to a model (e.g., </span><a href="https://docs.cloud.google.com/bigquery/docs/timesfm-model"><span style="text-decoration: underline; vertical-align: baseline;">TimesFM</span></a><span style="vertical-align: baseline;">) to perform anomaly detection. Historical signals from prior customer cases help the AI agent to predict customer-oriented SLOs. Further, AI-based anomaly detection can consult sources beyond signals produced by service itself — for instance, customer feedback. </span></p> <p><span style="vertical-align: baseline;">In this model, when the SRE AI agent detects an anomaly, it triggers an alert. Then, the SRE AI alerting agent groups, pre-processes, and enriches the alerts with the necessary context and information. These alerts in turn are run through autonomous AI alert handlers, which can address or mitigate a multitude of issues. The outcome of this system is faster issue resolution and a likely significant reduction in the number of alerts that SREs need to review.</span></p> <p><span style="vertical-align: baseline;">What's key in this ecosystem of agents is to be consistently transparent about what the data agents are evaluating — and how — and having consistent controls to prevent unwanted mutations of production state. </span></p> <h2><strong style="vertical-align: baseline;">Incident management</strong></h2> <p><span style="vertical-align: baseline;">Within Google SRE, incident management, or </span><a href="https://sre.google/resources/practices-and-processes/incident-management-guide/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">IMAG</span></a><span style="vertical-align: baseline;">, is a well-established process with clear roles and responsibilities, as well as tooling. SRE AI includes an agentic orchestration layer on top of the current IMAG process, which consists of agents that:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Monitor the communication surfaces used during the incident (incident response tools, chat spaces, videos, tracking documents), and consolidate/summarize data to improve communication and information sharing during the incident</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Support handoff between SREs participating in the incident, by creating handoff documents with necessary context</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Automatically create drafts of incident postmortems, improving their quality, reducing SRE effort, and ensuring that relevant information is included </span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Manage internal and external incident communications</span></p> </li> </ul> <h2><strong style="vertical-align: baseline;">Incident investigation</strong><span style="vertical-align: baseline;"> </span></h2> <p><span style="vertical-align: baseline;">The Google SRE team has also created agents to investigate incidents, and in some cases to autonomously mitigate issues. </span></p> <p><span style="vertical-align: baseline;">Before they can proceed to form hypotheses and propose mitigation steps, these agents use observability data (logging, motoring, tracing), as well as system topology, taxonomy, and dependency data to establish domain and intent. A few other building blocks that these agents use are distinct agents the team has created for navigating and executing playbooks, accessing alerting, performing anomaly detection, and deriving incident insights.</span></p> <h2><strong style="vertical-align: baseline;">Insights and risk management</strong></h2> <p><span style="vertical-align: baseline;">SRE requires an understanding of the end-to-end system and effective mitigation solutions, experience and lessons learned from past incidents, and the ability to perform risk management. Autonomous AI agents need similar skills to be able to manage production environments. </span></p> <p><span style="vertical-align: baseline;">While a common topology or taxonomy system can teach agents about the end-to-end system, and well-documented and described production </span><a href="https://modelcontextprotocol.io/docs/getting-started/intro" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Model Context Protocol (MCP)</span></a><span style="vertical-align: baseline;"> tools and skills can teach them about available tooling, there needs to be a way to continuously teach agents about historical issues and their associated risks. To solve that problem, the Google SRE team created AI Insights, a system that continuously reviews known incidents and extracts meaningful information from them, then makes it available to agents to drive better investigations and mitigation steps. </span><a href="https://ai.google.dev/gemini-api/docs/embeddings" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Gemini embedding models</span></a><span style="vertical-align: baseline;"> and </span><a href="https://cloud.google.com/discover/what-is-a-vector-database"><span style="text-decoration: underline; vertical-align: baseline;">vector-enabled databases</span></a><span style="vertical-align: baseline;"> power this system.</span></p> <p><span style="vertical-align: baseline;">The other part of the system is risk insights. The AI system marks each incident with appropriate risk categories that can be used both by agents before applying mitigations, and by SREs to determine critical areas to address.</span></p> <h3><span style="vertical-align: baseline;">Design considerations</span></h3> <p><span style="vertical-align: baseline;">Before building out these agents, Google SRE </span><span style="vertical-align: baseline;">defined a few high level principles for their adoption:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Processes and operations that are already successfully automated, or that can be easily automated with classic non-AI based systems, do not need to be replaced (as long as they meet business needs).</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Any new AI-based system must comply with existing and upcoming policies and procedures to keep the strong promises we have to our customers.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">An SRE AI agent needs to meet security, safety, and privacy requirements the same way as current systems and humans.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">SRE AI agents must have a strong identity (agents have roles and permissions assigned).</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">SRE AI agents need to provide a high level of reliability SLOs and have well-defined backup options (automated or manual).</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">SRE AI agents must be able to explain and reason about why and how they performed an action, as well as what options were considered and rejected. In other words, we favor transparency over black-box automation. </span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Business continuity plans must include contingencies for potential AI failures.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">AI-based systems need continuous access to production data to make correct decisions.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">AI systems need to be continuously evaluated against a quality framework, as well as to support </span><span style="vertical-align: baseline;">auditing and reporting to enable security tooling like detection and response.</span></p> </li> </ul> <p><span style="vertical-align: baseline;">In addition, we stipulated that SRE AI systems should make Google services even better for users and customers by accomplishing at least one of the following: </span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Relieve engineers from laborious and </span><span style="vertical-align: baseline;">repetitive</span><span style="vertical-align: baseline;"> operations</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Help engineers improve the quality and speed of decision making and execution </span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Allow SREs to better prevent, detect, and/or mitigate problems than they could address before</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Enable autonomous agentic feedback loops that drive toward service reliability improvements</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Reduce overall operational costs</span></p> </li> </ul> <h3><span style="vertical-align: baseline;">Built on proven infrastructure</span></h3> <p><span style="vertical-align: baseline;">Google SRE AI is built on proven Google infrastructure:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://ai.google.dev/gemini-api/docs/models" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Gemini</span></a><span style="vertical-align: baseline;">: The base foundational model behind Google SRE AI. The SRE team also depends heavily on custom fine-tuned Gemini models based on internal Google data and knowledge.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/vertex-ai"><span style="text-decoration: underline; vertical-align: baseline;">Gemini Enterprise Agent Platform (formerly Vertex AI)</span></a><span style="vertical-align: baseline;">: A full AI stack for developing solutions.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="text-decoration: underline; vertical-align: baseline;">Agent Development Kit (</span><a href="https://google.github.io/adk-docs/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">ADK):</span></a><span style="vertical-align: baseline;"> The development platform.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">MCP servers: Running on top of standard Google API infrastructure, this is the same infrastructure used to provide </span><a href="https://cloud.google.com/blog/products/ai-machine-learning/announcing-official-mcp-support-for-google-services"><span style="text-decoration: underline; vertical-align: baseline;">external customers with MCP support</span></a><span style="vertical-align: baseline;">.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Standard internal observability infrastructure (monitoring, logging, tracing).</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">AI and ML capabilities built into </span><a href="https://cloud.google.com/bigquery?utm_source=pmax&amp;utm_medium=display&amp;utm_campaign=Cloud-SS-DR-GCP-1713658-GCP-DR-NA-US-en-pmax-Display-pmax-All-BigQuery&amp;utm_content=c--x--9021712-21713147502&amp;gclsrc=aw.ds&amp;gad_source=1&amp;gad_campaignid=22037004910&amp;gclid=Cj0KCQiAyP3KBhD9ARIsAAJLnnbo2-37fR9eOpRLdHeKbvQPLy5r1oGBQcBDoi5rquEdx-JMkX6ryzQaAsShEALw_wcB"><span style="text-decoration: underline; vertical-align: baseline;">Google BigQuery</span></a><span style="vertical-align: baseline;">, and </span><a href="https://cloud.google.com/discover/what-is-a-vector-database"><span style="text-decoration: underline; vertical-align: baseline;">Google vector databases</span></a><span style="vertical-align: baseline;">.</span></p> </li> </ul> <p><span style="vertical-align: baseline;">We group these infrastructure components together into autonomous systems. At Google, we’ve been developing and using autonomous systems to manage production for a long time. However, today’s AI-based autonomous systems are very powerful and not always deterministic. To help us understand how autonomous the systems truly are, we developed a way to track autonomous levels.</span></p> <h3><span style="vertical-align: baseline;">Dive deeper: Read the white paper</span></h3> <p><span style="vertical-align: baseline;">For engineers and leaders looking to explore the technical architecture and rigorous governance models behind these innovations, we invite you to read our comprehensive whitepaper, “AI in SRE Practice: Moving Beyond Automation at Google,” which provides an in-depth look at how Google SRE is navigating the transition from deterministic automation to agentic AI. Download the whitepaper</span><span style="vertical-align: baseline;"> </span><a href="https://goo.gle/4uUxy4y" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">here</span></a><span style="vertical-align: baseline;">.</span></p></div>
  50. Sr. Director, Product Management

    Wed, 22 Apr 2026 12:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Today at Google Cloud Next, we are unveiling a more proactive Gemini Cloud Assist, our AI-assisted cloud operations platform. This update shifts your Google Cloud operations from manual workflows to a proactive, intelligent experience supported by a powerful ecosystem of agents.</span></p> <p><strong style="vertical-align: baseline;">Why it matters: </strong><span style="vertical-align: baseline;">A new agentic architecture enables Gemini Cloud Assist to handle the heavy lifting of your cloud management. By embedding intelligence, your enterprise context, and the power of Gemini directly into the operational layer, Gemini Cloud Assist proactively executes complex tasks such as designing applications, troubleshooting issues, and preemptively optimizing costs, that previously required constant human oversight. In enterprise-scale systems, this approach accelerates development velocity and reduces resolution times. </span></p> <p><strong style="vertical-align: baseline;">What’s new: </strong></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Using natural language and the power of Gemini, reduce the time from design to deployment of new or existing multi-resource deployments via a </span><strong style="vertical-align: baseline;">redesigned Application Design Center</strong><span style="vertical-align: baseline;">.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Automate infrastructure operations via </span><strong style="vertical-align: baseline;">gcloud, kubectl, and Terraform </strong><span style="vertical-align: baseline;">while using proactive multi-turn agents to troubleshoot and resolve incidents.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Identify your cost anomalies 24/7 </strong><span style="vertical-align: baseline;">using a proactive FinOps agent that analyzes spending spikes and generates granular cost reports on demand.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Assistance wherever you are. </strong><span style="vertical-align: baseline;">Powered by </span><a href="https://docs.cloud.google.com/mcp/supported-products"><span style="text-decoration: underline; vertical-align: baseline;">Google Cloud MCP servers</span></a><span style="vertical-align: baseline;"> and our proactive agents under the hood, Gemini Cloud Assist also exposes its own design, operation, troubleshooting and optimization capabilities as published MCP servers, bringing them straight to your IDE. </span></p> </li> </ul> <p style="padding-left: 40px;"><span style="font-style: italic; vertical-align: baseline;">“Gemini Cloud Assist has significantly helped our dev teams. It reduced the number of outreach and touch points I have with them regarding Google Cloud questions by 60%. This allows our cloud team to scale more effectively and focus on more complex tasks.” </span><span style="vertical-align: baseline;">- Oscar Aldana Assad, Senior Cloud Engineer, Petco</span></p> <p><span style="vertical-align: baseline;">Let’s take a deeper look at how the agentic Gemini Cloud Assist can help your operations.</span></p> <h3><span style="vertical-align: baseline;">Accelerate production-readiness with Application Design Center</span></h3> <p><span style="vertical-align: baseline;">Gemini Cloud Assist serves as the intelligent reasoning engine for Application Design Center, acting as the bridge between natural-language intent, and a visual, production-ready architecture. By describing your infrastructure goals in plain language, Gemini Cloud Assist leverages Application Design Center to automatically lay out a visual design, including deployable Terraform. These templates are based on best-practice architecture guidance from Google Cloud and help bring security, reliability and compliance by design. Integrated with Security Command Center, quickly go from idea to deployment that conforms to your organizational policies.</span></p> <p><span style="vertical-align: baseline;">Platform teams can then curate shared catalogs of pre-approved templates and integrate their own custom Terraform modules directly into the design process, providing a governed framework. This established, well-lit path helps developers adhere to organizational security and compliance guardrails from the first day of deployment. Beyond initial deployment, Gemini supports the full application lifecycle with interactive, multi-turn problem solving to update cloud resources. </span></p></div> <div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">Move from reactive to proactive remediation</span></h3> <p><span style="vertical-align: baseline;">In production, Gemini Cloud Assist helps you shift operations from reactive troubleshooting to quickly analyzing hypotheses to drive a lower time to resolution. Triggered by alerts, Gemini Cloud Assist proactively clusters and analyzes signals to initiate investigations before issues escalate. Now with Gemini 3, Gemini Cloud Assist correlates logs and metrics and identifies root causes from infrastructure signals down to the application code. Gemini Cloud Assist explores parallel hypotheses via tool calls and presents a technical breakdown of observations in a centralized UI. If intervention is required to address an underlying Google Cloud issue, users can hand off complete context to Google support, minimizing the iterations required for sharing configuration and context data.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/proactive_alert_investigations_blog.gif" alt="proactive_alert_investigations"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">Identify cost anomalies 24/7</span></h3> <p><span style="vertical-align: baseline;">To maintain economic health, Gemini Cloud Assist now acts as an proactive optimization agent for your projects. Running in the background 24/7, it monitors for cost anomalies and provides root-cause analysis, correlating spending spikes with specific engineering triggers like new resource creation, auto-scaling events, or pricing changes. You can query resource utilization via natural language to generate on-demand, tabulated reports, by project and applications registered in AppHub, providing granular visibility into "</span><span style="font-style: italic; vertical-align: baseline;">who, what, when, and how</span><span style="vertical-align: baseline;">" — without manual data aggregation. For example, you can ask ‘Why did the cost of my application increase yesterday?’ or ‘How much did my project cost last month?’ and Gemini Cloud Assist answers by correlating cost data with infrastructure change, audit, and monitoring logs to get you an accurate answer.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/3_Vz6FwaI.gif" alt="3"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">Assistance everywhere</span></h3> <p><span style="vertical-align: baseline;">We are meeting teams where they work by expanding the surfaces where Gemini Cloud Assist is available. A Gemini Cloud Assist agent is already accessible through the console and mobile interfaces. And with new support for the Model Context Protocol (MCP), Gemini Cloud Assist is now available in Gemini CLI, your favorite agentic IDE or CLI, and third-party toolchains like ServiceNow and Slack. Integrating proactive assistance within existing workflows helps teams to avoid context switching and maintain flow-state.</span></p> <h3><span style="vertical-align: baseline;">Proactive capabilities at your fingertips</span></h3> <p><span style="vertical-align: baseline;">We designed Gemini Cloud Assist to help manage the end-to-end lifecycle of your applications, providing a multi-agent approach from deploying new applications to managing existing applications in the cloud. With the help of Gemini 3, Gemini Cloud Assist can now:</span></p> <ul> <li role="presentation"><strong style="vertical-align: baseline;">Increase your development velocity: </strong><span style="vertical-align: baseline;">Accelerate production-readiness using intent-driven architectures that unify best practices, security policies, and enterprise compliance.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Streamline production operations</strong><span style="vertical-align: baseline;">: Triage, diagnose and resolve production issues faster, through Gemini-based troubleshooting, recommendations and remediations.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Automate cost optimization:  </strong><span style="vertical-align: baseline;">Automatically detect, analyze, root-cause, and alert you about cost anomalies for your projects on a daily basis. </span></li> <li role="presentation"><strong style="vertical-align: baseline;">Meet your teams where they are:  </strong><span style="vertical-align: baseline;">Through proactive agents and MCP tools, engage with functionality using surfaces that range from the Google Cloud console to your CLI and IDE, so teams can stay in a flow-state.</span></li> </ul> <p><span style="vertical-align: baseline;">The future of operations is agentic. You can begin your journey with our proactive cloud by enabling </span><a href="https://console.cloud.google.com/gemini-admin/products"><span style="text-decoration: underline; vertical-align: baseline;">Gemini Cloud Assist</span></a><span style="vertical-align: baseline;"> in your project settings today.</span></p></div>
  51. Product Manager, Google Cloud

    Mon, 02 Mar 2026 17:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Managing planned maintenance is critical for ensuring business continuity and application performance. However, as your usage of cloud services grows, staying on top of maintenance schedules can be complex and time-consuming. Current approaches often result in inconsistent notifications and varying levels of control across different products. To help you avoid missed maintenance windows and disruptions, we are announcing the General Availability (GA) of Unified Maintenance, a centralized dashboard that lets you view and manage maintenance events across your Google Cloud services.</span></p> <p><span style="vertical-align: baseline;">Unified Maintenance consolidates maintenance updates into a single view, making it easier to track upcoming events. With Unified Maintenance, you can:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">View planned maintenance:</strong><span style="vertical-align: baseline;"> See events for services like Compute Engine, Google Kubernetes Engine (GKE), Cloud SQL, Memorystore, AlloyDB, and Looker in one dashboard (see </span><a href="https://docs.cloud.google.com/unified-maintenance/docs/supported-services"><span style="text-decoration: underline; vertical-align: baseline;">supported services</span></a><span style="vertical-align: baseline;">).</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Get standardized alerts:</strong><span style="vertical-align: baseline;"> Receive consistent maintenance information through Cloud Logging, which allows you to set up alerts and integrate them with your existing monitoring or ticketing systems.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Understand your options:</strong><span style="vertical-align: baseline;"> The </span><a href="https://console.cloud.google.com/cloud-hub/maintenance" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">dashboard</span></a><span style="vertical-align: baseline;"> clearly indicates which maintenance events offer user controls.</span></p> </li> </ul> <h3><span style="vertical-align: baseline;">What’s next</span></h3> <p><span style="vertical-align: baseline;">We are working to add support for more Google Cloud services and enhance the platform's capabilities. Our roadmap includes expanded scopes for folders and organizations, as well as application-level visibility.</span></p> <p><span style="vertical-align: baseline;">You can access the Unified Maintenance dashboard directly in the Google Cloud console to view upcoming events for your subscribed services. To learn more about how to use these new features, read the </span><a href="https://docs.cloud.google.com/unified-maintenance/docs/overview"><span style="text-decoration: underline; vertical-align: baseline;">documentation</span></a><span style="vertical-align: baseline;"> and the </span><a href="https://docs.cloud.google.com/unified-maintenance/docs/set-up-unified-maintenance"><span style="text-decoration: underline; vertical-align: baseline;">Get started guide</span></a><span style="vertical-align: baseline;">.</span></p></div>
  52. Principal Platform Engineer, John Lewis Partnership

    Wed, 04 Feb 2026 18:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="font-style: italic; vertical-align: baseline;">For any organization that has invested in an internal developer platform, a question inevitably arises: Is it actually working? </span></p> <p><span style="font-style: italic; vertical-align: baseline;">Simply tracking adoption rates won't tell you if your platform is truly delivering value to your developers. This was the challenge faced by John Lewis, a major UK retailer. In our previous articles (parts </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-one"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">1</span></a><span style="font-style: italic; vertical-align: baseline;"> and </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-two"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">2</span></a><span style="font-style: italic; vertical-align: baseline;">) we introduced the John Lewis Digital Platform (JLDP) and how it enabled dozens of product teams to build high-quality software rapidly to power www.johnlewis.com and other critical applications. But how did they know that the platform was actually successful? Traditional product metrics like revenue and sales don’t translate easily to this world. When you focus only on whether your tenants use the platform, you don’t understand whether it’s bringing them value.</span></p> <p><span style="font-style: italic; vertical-align: baseline;">In this article, Alex Moss from the John Lewis platform team discusses how they moved beyond simple usage metrics to develop a sophisticated, multi-stage approach to measuring the real value of their platform — a journey that took them from lead-time metrics, to </span><a href="https://dora.dev/" rel="noopener" target="_blank"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">DORA</span></a><span style="font-style: italic; vertical-align: baseline;">, and finally to a "Technical Health" score. Along the way, they explore how the JLDP’s purpose evolved — and its value along with it. - Darren Evans</span></p> <h3><strong style="vertical-align: baseline;">Initial measurement: A focus on platform value</strong></h3> <p><span style="vertical-align: baseline;">In the early days of the platform, understanding its value was actually much easier. This was because the platform was created with a very clear purpose: to enable speed of change. The John Lewis business wanted to create multiple product teams working on several features of johnlewis.com in parallel, and to put those features in front of customers quickly for feedback.</span></p> <p><span style="vertical-align: baseline;">Its origins in the world of the company’s John Lewis Digital online business resulted in it being treated as a product from a very early stage, and therefore integrated with that area’s reporting mechanisms too. Thus, it became normal to link the platform objectives to the online business’s broader goals each quarter and report on measurable key results. This kept the focus on the reasons the platform is important: do improvements to the platform continue to justify using it over seeking out a different one? We cannot afford to rest on our laurels!</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/1_aSY3nPB.max-1000x1000.png" alt="1"> </a> <figcaption class="article-image__caption "><p data-block-key="nnhmb">The six annual measures reported against every quarter. The specific measures have varied over the years.</p></figcaption> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">In addition to this, in the first few years of the platform’s existence, there were three simple metrics that best indicated how the platform was living up to the rationale for creating it:</span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Service Creation Lead Time:</strong><span style="vertical-align: baseline;"> How long it took to create a tenancy (the space in which a product team was creating their software)</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Onboarding Lead Time:</strong><span style="vertical-align: baseline;"> How long it took that product team to deploy something into production</span></p> </li> <li><strong style="vertical-align: baseline;">First Customer Lead Time:</strong><span style="vertical-align: baseline;"> How long it took that product team to designate their service as “live to customers”</span></li> </ol></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/2_DVTZRKS.max-1000x1000.png" alt="2"> </a> <figcaption class="article-image__caption "><p data-block-key="nnhmb">Some screenshots from the early version of the platform's self-written service catalogue, tracking the three metrics mentioned</p></figcaption> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">This was then combined with the number of tenants present on the platform into a report, which was displayed as part of an initial home-grown Service Catalogue shown above (which was later </span><a href="https://medium.com/john-lewis-software-engineering/weve-gone-backstage-this-is-how-we-use-it-on-our-digital-platform-b299cd4acb24" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">replaced with Backstage</span></a><span style="vertical-align: baseline;">). This report served two purposes:</span></p> <ol> <li aria-level="1" style="list-style-type: lower-alpha; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">A very clear visualization for stakeholders of how much their platform was being adopted, and how fast they were able to get up and running (in particular, “Service Creation” being measured in single-digit hours, in comparison to the weeks teams would traditionally have had to wait). This is important, because in the early days of your product, you need to justify its continued growth and investment.</span></p> </li> <li aria-level="1" style="list-style-type: lower-alpha; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">A useful way for the platform team themselves (and stakeholders) to see which teams were taking their time about getting something into production. Is my product actually helping you? And if not, what more could we be doing?</span></p> </li> </ol> <p><span style="vertical-align: baseline;">Using this as a conversation-starter with our tenants opened doors to rich sources of feedback that could be turned into platform features: When we asked tenants “What’s stopping you from going live?”, they often answered that the product they were building was simply complex. But we also often saw that our own processes were getting in the way. This was important, as we could then do something about it.</span></p> <p><span style="vertical-align: baseline;">The easiest of these barriers for us to overcome were typically technology-related. In </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-one"><span style="text-decoration: underline; vertical-align: baseline;">previous articles</span></a><span style="vertical-align: baseline;">, we covered two examples, “My team is spending a lot of time writing Terraform to provision PubSub,” and “we’re having trouble learning how to use Kubernetes.” To help, the platform team created “paved roads” to enable self-service provisioning or simplification of Kubernetes, significantly reducing these burdens for teams.</span></p> <p><span style="vertical-align: baseline;">The more significant opportunities to streamline getting new services live were a result of our processes (e.g., security approvals) — and if your platform is empowered to simplify these sorts of organizational functions, then the gains can be extremely beneficial. One such example was the Information Security risk assurance process. Gaining the necessary security sign-offs and producing the required documentation was a necessary but time-consuming task, and - with the rate of change in the business - this was often something that many teams were going through in parallel. Our platform team successfully negotiated a simplified process for its tenants. It was able to do this because, by being resident on the platform, they could guarantee that security controls were in place and that policies were being followed. This was a direct result of the platform building features to meet those needs, and being able to provide evidence that they were being used — removing the need for the tenant team to either document or invent this themselves. This is still simplifying the developer experience through platform engineering, even though the solution is a less technically-based one.</span></p> <p><span style="vertical-align: baseline;">Sometimes the conversation resulted in feedback that wasn’t even platform-shaped — for example, helping teams understand concepts like feature flagging and dark launching, or software design options to help break dependencies with legacy systems. John Lewis’ platform teams are staffed with experienced engineers, ideally ones with software development experience, which helps a lot with these sorts of interactions.</span></p> <p><span style="vertical-align: baseline;">A key point here is that by measuring how effectively teams were making it into production, we could identify who to talk to and elucidate the feedback we needed on what problems needed to be addressed. Simply relying on your tenants thinking of this themselves when they don’t see the bigger picture (or have other priorities) is not nearly as effective.</span></p> <p><span style="vertical-align: baseline;">We then combined the process with more traditional approaches such as sending out a survey or use of Net Promoter Scoring to help build popularity in the product. The results of these were usually very positive, and could be used to generate mindshare — especially where a product team was comfortable talking about their positive experiences in internal tech conferences and the like.</span></p> <h3><strong style="vertical-align: baseline;">Helping understand team performance</strong></h3> <p><span style="vertical-align: baseline;">A few years into the life of the platform, our emphasis started to shift. There was less of a need to prove the value of the platform — the business and our engineers were happy — so we shifted from “how can we get you into production as quickly as possible” towards “how can we enable you to continue to be as fast, but also reduce friction, in your day-to-day activities.” This led us towards DORA metrics.</span></p> <p><span style="vertical-align: baseline;">Our initial DORA implementations involved mining information from our systems of record for change and incident, complimented by our already-mature observability stack for availability data, as well as pulling events from things like cloud audit logs. We built software to do this and stored it in BigQuery, which enabled us to visualize the data in our home-grown Service Catalogue tool. Later, we moved this into Grafana dashboards instead, which are still in use today:</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/3_N8Q4Xha.max-1000x1000.png" alt="3"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Looking for patterns in this data led to us discovering additional features that would be useful for us to build. Two major examples of this were </span><span style="font-style: italic; vertical-align: baseline;">handling change</span><span style="vertical-align: baseline;">, and </span><span style="font-style: italic; vertical-align: baseline;">operational readiness</span><span style="vertical-align: baseline;">.</span></p> <p><span style="vertical-align: baseline;">JLP’s service management processes were geared towards handling complex release processes across multiple large systems and/or teams - but we had fundamentally changed our architecture by adopting microservices. This empowered teams to release independently at will, and therefore manage the consequences of failed changes themselves. We used the data we’d collected about change failure rates and frequency of small releases to justify a different approach: allowing tenants to automatically raise and close changes as part of their CI/CD pipelines. After clearing this approach with our Service Management team, we developed a CLI tool that teams could use within their pipelines. This had the additional benefit of allowing us to capture useful data at point of release, rather than scraping more awkward data sources. The automated change “carrot” was very popular and was widely adopted, shifting the approval point left to the pull request rather than later in the release process. This reduced time wastage, change-set size and risk of collisions.</span></p> <p><span style="vertical-align: baseline;">In a similar vein, with more teams operating their own services, the need for a central site-wide operations team was reduced. We could see from our metrics that teams practicing “You Build It, You Run It” had fewer incidents and were resolving them much more quickly. We used this as evidence to bring in tooling to help them respond to incidents faster, and decouple the centralized ops teams from those processes — in some cases allowing them to focus on legacy systems, and in others, removing the need for the service entirely (which resulted in significant cost savings, despite the fact that we had more individual product teams on-call). This, and supporting observability and alerting tooling, was all configured through the platform’s paved-road pipeline described in our </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-one"><span style="text-decoration: underline; vertical-align: baseline;">previous article</span></a><span style="vertical-align: baseline;">.</span></p> <p><span style="vertical-align: baseline;">The DORA metrics helped us architecturally as well. Operational data shined a light on the brittleness of third-party and legacy services, thereby driving greater investment into resilience engineering, alternative solutions, and in some cases, causing us to re-evaluate our build vs. buy decisions. </span></p> <h3><strong style="vertical-align: baseline;">Choosing what to measure</strong></h3> <p><span style="vertical-align: baseline;">It’s very important to choose wisely about what to measure. Experts in the field (such as </span><a href="https://www.youtube.com/watch?v=trO_fiTAZeM" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Laura Tacho</span></a><span style="vertical-align: baseline;">) influenced us to avoid vanity metrics and to be cautious about interpreting the ones we do collect. It’s also important for metrics to be meaningful to the target audience, and presented accordingly.</span></p> <p><span style="vertical-align: baseline;">As an example, we communicate about cost and vulnerability with our teams, but the form this takes depends on the intended audience’s role. For example, we send new vulnerabilities or spikes in cost directly to product teams’ collaboration channels, because experience has taught us that having our engineers see these vulnerabilities results in a faster response. On the other hand, for compliance reporting or review by team leads, reports are more effective at summarising the areas that need action. Because if we know one thing, it’s that nobody wants to be a leader of the “vulnerabilities outside of policy” dashboard!</span></p> <p><span style="vertical-align: baseline;">It was not unusual for us to historically look at measures such as the number or frequency of incidents. But in a world of highly automated response systems, this is a trap, as alerts can be easily duplicated. Focusing too much on a number can drive the wrong behavior — at worst, deliberately avoiding creating an incident at all! Instead, it’s much better to focus on the impact of the parent incident and how long it took to recover. Another example is reporting on the number of vulnerabilities. Imagine you have a package that is used extensively across many components in a distributed system. Disclosing that the package has a vulnerability can create a false sense of scale, when in fact patching the base image deals with the problem swiftly. Instead, it’s better to look at the speed of response than a pre-agreed policy based on severity. This is both a much more effective and reasonable metric for teams to act on, so we see better engagement.</span></p> <p><span style="vertical-align: baseline;">It’s very important that you put across as much context as possible when presenting the data so that the right conclusions can be drawn — especially where those reports are seen by decision-makers. With that in mind, we combined raw metrics we could visualize with user opinion about them. This helped to bring that missing context: Is the team that’s suffering from a high change failure rate also struggling with its release processes and batch size? Is the team that’s not addressing vulnerabilities quickly also reporting that they’re spending too much time on feature development and not enough on operational matters? We reached for a different tool — </span><a href="https://getdx.com/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">DX</span></a><span style="vertical-align: baseline;"> — to help us bring this sort of information to bear. In our </span><a href="https://cloud.google.com/blog/products/application-development/how-john-lewis-partnership-chose-its-monitoring-metrics"><span style="text-decoration: underline; vertical-align: baseline;">follow-up article</span></a><span style="vertical-align: baseline;">, we’ll elaborate on how we did this and how it prompted us to expand the data we collected about our tenants. Stay tuned!</span></p> <p><span style="font-style: italic; vertical-align: baseline;">To learn more about shifting down with platform engineering on Google Cloud, start </span><a href="https://cloud.google.com/solutions/platform-engineering"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">here</span></a><span style="font-style: italic; vertical-align: baseline;">.</span></p></div>
  53. Principal Platform Engineer, John Lewis Partnership

    Wed, 04 Feb 2026 18:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="font-style: italic; vertical-align: baseline;">In </span><a href="https://cloud.google.com/blog/products/application-development/at-john-lewis-partnership-measuring-developer-platform-value"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">part one</span></a><span style="font-style: italic; vertical-align: baseline;"> of this article, Alex Moss from the John Lewis Partnership covered the metrics that they use to measure the value of their developer platform. Now, let's talk about a crucial aspect of any measurement strategy: choosing the right things to measure. It's easy to get lost in a sea of data or to focus on metrics that look impressive, but don't actually reflect the health of your platform or the experience of your developers. Here, Alex shares the John Lewis philosophy on how to choose meaningful metrics and present them in a way that drives the right conversations and actions, ensuring that the data is always presented with as much context as possible. - Darren Evans</span></p> <p><span style="vertical-align: baseline;">While the solution we detailed in the first half of this article worked very well, relying solely on objective measures comes with a number of traps. They are very easy to misinterpret: either wasting time (“the team is working on another product at the moment”) or not telling the right story (“the incident wasn’t closed properly”). This leads to a scaling challenge: Chatting with a small number of teams to understand a situation is one thing. But when you are only one small team trying to build a product, and you need to talk across several dozen teams, it’s not so easy.</span></p> <h3><strong style="vertical-align: baseline;">Collecting engineers’ subjective feedback</strong></h3> <p><span style="vertical-align: baseline;">We needed a way to collate more subjective feedback, ideally in a form that we could visualize and contrast to the objective DORA and other service metrics we held.</span></p> <p><span style="vertical-align: baseline;">Our initial attempt at this involved creating Service Operability Assessments — questionnaires that tenants fill in every quarter. Service Operability Assessments are intended to hold a series of thought-provoking questions aimed at whether the team is following good practices for running their service. This worked well with an experienced facilitator (usually a senior platform engineer) who could ask further probing questions and pull out the key feedback and actions. But as you might imagine, this suffered from scaling challenges. We eventually let this be handled entirely self-service — an imperfect system, since many teams are quite happy to just copy/paste their answers from the previous quarter, which may or may not reflect reality!</span></p> <p><span style="vertical-align: baseline;">We then learned about a tool called </span><a href="https://getdx.com/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">the DX platform</span></a><span style="vertical-align: baseline;">, which significantly changed how we approached this, and which is now used across our entire Engineering community. It works by surveying individual engineers (rather than teams) for a few minutes every three months. The questions are curated based on DX’s research, backed by the founders of DORA and other similar frameworks. We’ve found it very helpful to be able to slice the results in different ways, including looking at areas across whole platforms or deep-diving on particular teams. The latter, in combination with our DORA data, makes for rich conversations. For example, in the DX tool, a team which recently suffered through some highly impactful incidents might also have registered concerns on “Production Debugging,” while another team that saw a marked drop in release frequency flagged worries around “Change Confidence” or “Ease of Release.” The platforms team can at this point step in to offer advice or potentially implement new features to help with the issues the teams are seeing.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/1_J4WNCsj.max-1000x1000.png" alt="1"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">The pre-built drivers and reports in DX are tremendously useful, but we also augment it with our own custom queries to help us understand areas of current focus. For example, we measure Customer Satisfaction (CSAT) for the platform and its portal (Backstage), and collect data on how long it takes for a newcomer to begin submitting pull requests and ask them about how they found the onboarding process. We also recently started assessing engineers’ opinions on the effectiveness of AI coding assistants to help justify further investment in them (instead of just relying on market insight).</span></p> <p><span style="vertical-align: baseline;">An example of where this helped focus our efforts was with documentation, namely, building capabilities into our Backstage developer portal to make it easier for teams to view each others’ docs through pipelines that automatically publish content and make it discoverable.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/2_gf9lDAw.max-1000x1000.png" alt="2"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Service health - Feature adoption &amp; beyond</strong></h3> <p><span style="vertical-align: baseline;">Outside of the insights we generate from the likes of DORA and DX, we’ve recently begun questioning not only whether the platform itself is valuable, but whether tenants are </span><span style="font-style: italic; vertical-align: baseline;">getting the value they should</span><span style="vertical-align: baseline;"> from it. In other words, we’ve effectively started to measure platform feature adoption.</span></p> <p><span style="vertical-align: baseline;">To do this, we built out what we refer to internally as our Technical Health feature. It takes the form of a custom plugin that integrates with our Backstage Developer Portal, which then queries an in-house API that surfaces data fed from a large number of small jobs that collect information on the things we want to measure. These jobs are independently releasable themselves, which allowed us to scale this up pretty quickly. </span></p> <p><span style="vertical-align: baseline;">We currently capture four categories of health measures:</span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Technical health: </strong><span style="vertical-align: baseline;">We currently have 17 “technical” measures. Examples here include measuring whether teams are using our paved road pipeline and custom Microservice CRD (see previous articles </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-one"><span style="text-decoration: underline; vertical-align: baseline;">1</span></a><span style="vertical-align: baseline;"> and </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-two"><span style="text-decoration: underline; vertical-align: baseline;">2</span></a><span style="vertical-align: baseline;">) rather than “terraforming” their own resources, following our recommended Kubernetes practices (such as resource sizing, disruption budgets and lifecycle probes), keeping base images up to date, and the like. We also include some “softer” technical measures such as whether they are running pipelines frequently enough to pick up changes (we don’t run this for teams), reviewing their operability assessments, staying on top of git branches, and so on.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Operational readiness:</strong><span style="vertical-align: baseline;"> Then, there are 18 measures relating to operational health — things like whether a pre-flight configuration is in place, whether runbooks are written, docs have been published, and so on. This is an evolution of an Operational Readiness checklist from several years ago (back when we used to have separate Delivery and Operations teams, and therefore these sorts of checks were mandatory for “handover”). We tailored this checklist to the specific features of the platform that help teams achieve good operability, rather than being a generic list. This also serves to help our Service Management team feel confident that the right practices are being followed, thereby eliminating a point of friction when carrying out manual reviews.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Migrations: </strong><span style="vertical-align: baseline;">From time to time, the Platform requires tenants to carry out work to keep up with changes to the platform itself. A classic example of this is getting teams to deal with deprecated Kubernetes API versions. This also includes adoption of different features that we want to drive more forcefully in order to remove the older way of doing things (say for example, in favour of something more secure). We found that as the Platform grew, we had a long tail of migration work that we needed teams to perform, providing an easy way for Product Managers and Delivery Leads to prioritize their teams’ workloads.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Broader engineering practices: </strong><span style="vertical-align: baseline;">We recently opened up the feature to allow other teams to contribute — in this case, our Engineering leadership — to build in their own measures, such as whether teams are keeping up to date with versions of our design system or whether they’re following broader engineering practices that extend beyond just the JL Digital Platform. </span></p> </li> </ol> <p><span style="vertical-align: baseline;">We present this data through aggregated views (like the example shown below), as well as individual tasks and broader leaderboards — all designed to catch the eye of those with influence over a team’s priorities. We’ve found that the desire for an engineer to turn a traffic-light green can be a powerful motivator — far more effective than relying on documentation or announcements.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/3_paqGoLi.max-1000x1000.png" alt="3"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">This technology works through custom plugins that we’ve built for the Backstage Portal. Each “health check” is itself its own microservice (often running as a job) which interrogates the appropriate system to determine whether the measure is met. For example, one microservice checks that a PodDisruptionBudget has been created by querying Kubernetes directly, while another that looks at whether distroless base images are in use, does so by inspecting container image layers. There’s a template for creating new metrics, which makes it easy for engineers to create new ones — including those outside the platform team themselves. The results are stored in BigQuery, with an API to make Backstage plugin development simpler.</span></p> <p><span style="vertical-align: baseline;">A reality of introducing measures like this is that it drives more work into the product teams. It is important that your culture be ready for this. If we had implemented these measures very early in the platform’s life, this would likely have affected how the product was perceived — perhaps as very strict or inhibiting the pace of change with guardrails. This can negatively impact overall adoption. By introducing these later on, we benefited from many tenants who already saw the platform as very valuable, as well as the confidence that we had selected the right measures and could apply them consistently. That said, we did still see a small drop in CSAT for the platform after we started doing this. We try to be considerate about the pace that we launch each measure to give product teams the time to absorb the work, as well as provide a means for teams to suppress the indicators that aren’t relevant to them. For example, a tenant might deliberately choose not to use pod autoscaling for performance reasons, or have a functional reason why they can’t use our Microservice CRD.</span></p> <p><span style="vertical-align: baseline;">The introduction of these sorts of assurance measures on tenant behaviour is a reflection of the maturity of the platform. In the early days, we relied on highly skilled teams to do the right thing whilst going fast. But as time has passed, we’ve witnessed a variety of skills and capabilities, combined with shifts in ownership of services, that pushed us to introduce techniques to drive the right outcomes. This is also due to the platform itself becoming complex — the cognitive load for a new team is much higher than it was, due to all its new features. We needed to put some lights along the edges of our paved road to help teams stay on it!</span></p> <p><span style="vertical-align: baseline;">Throughout this evolution, we’ve continued to report on our key results for the business themselves: Are we still doing what they want of us? This has naturally shifted from “go fast, enable teams” (which we largely see as a solved problem, to be honest) towards “do it safely, and manage your technical debt.”</span></p> <h3><strong style="vertical-align: baseline;">Are you being served? Key takeaways</strong></h3> <p><span style="vertical-align: baseline;">Long story short, the question of whether a developer platform has value is complex, and can be answered in many ways. As you embark on building out — and quantifying — your own developer platform, here are a few concluding thoughts to keep in mind:  </span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Measurement is a journey, not a destination:</strong><span style="vertical-align: baseline;"> Start by measuring something meaningful to your stakeholders, but be prepared to adapt as your platform evolves. In the beginning, it’s okay to prioritize further investment in your product, but it’s better to actually measure how the platform is enabling your teams. The things that mattered when you were initially proving out the platform’s viability are unlikely to be what are important several years later when your features are more mature and your priorities have shifted.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Listen to the humans: </strong><span style="vertical-align: baseline;">Don’t assume that just because your platform is being used, that it is providing value. The most powerful metrics are often qualitative; engineers wanting to use your tool and CSAT are strong signals, but asking them questions about how they are using it is a better way to gain insight into how you can improve it. It is hard to figure out what’s working (and what isn’t) through measurement alone.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Data is for enabling, not just reporting:</strong><span style="vertical-align: baseline;"> Use your insights to help teams improve, not just to show graphs to leadership. Further, be transparent about what specific data led you to act. For example, when you see a dip in release frequency for a specific team, use that data to start a conversation about potential roadblocks rather than simply flagging it as a problem. By doing this, you build the trust and goodwill with both leadership and your tenants to keep moving the platform forward. </span></p> </li> </ol> <hr/> <p><sub><span style="font-style: italic; vertical-align: baseline;">The evolution of the John Lewis Partnership’s measurement strategy serves as a compelling case study. By transitioning from basic lead-time tracking to a holistic model — blending DORA metrics with qualitative developer feedback — they demonstrated that true platform success is defined by the genuine value it delivers, not merely by adoption rates.</span></sub></p> <p><sub><span style="font-style: italic; vertical-align: baseline;">To learn more about platform engineering on Google Cloud, check out some of our other articles: Using Platform Engineering to simplify the developer experience - </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-one"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">part one</span></a><span style="font-style: italic; vertical-align: baseline;">, </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-two"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">part two</span></a><span style="font-style: italic; vertical-align: baseline;">, </span><a href="https://cloud.google.com/blog/products/application-development/common-myths-about-platform-engineering"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">5 myths about platform engineering: what it is and what it isn’t</span></a><span style="font-style: italic; vertical-align: baseline;"> and</span><span style="font-style: italic; vertical-align: baseline;"> </span><a href="https://cloud.google.com/blog/products/application-development/another-five-myths-about-platform-engineering"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">Another five myths about platform engineering</span></a><span style="font-style: italic; vertical-align: baseline;">. We also recommend reading about </span><a href="https://cloud.google.com/blog/products/application-development/introducing-app-hub"><span style="text-decoration: underline; vertical-align: baseline;">App Hub</span></a><span style="vertical-align: baseline;">, </span><span style="font-style: italic; vertical-align: baseline;">our foundational tool for managing application-centric governance across your organization.</span></sub></p></div>
  54. 10X Lead, delta Team, Google Cloud Consulting

    Thu, 08 Jan 2026 17:00:00 -0000

    <div class="block-paragraph_advanced"><p class="p1">FINRA, the Financial Industry Regulatory Authority, consistently seeks to achieve the highest standards in its technology practices. To elevate its software development lifecycle, FINRA — which oversees member broker-dealers — engaged Google consultants to help apply a metrics-driven methodology to its engineering practices.</p> <p class="p1"><a href="https://dora.dev/" rel="noopener" target="_blank">DORA</a> is a popular framework <span style="vertical-align: baseline;">for helping organization improve software delivery performance through capabilities that can be measured by key metrics. These include </span>deployment frequency, change lead time, change failure rate, failed deployment recovery time, and rework.</p> <p class="p1">While FINRA had begun laying the groundwork to adopt DORA internally, the organization recognized an opportunity to accelerate implementation by tapping Google's firsthand experience.</p> <p class="p1">Google conducted a discovery effort alongside technology leaders to identify opportunities for improvement. The recommendation that followed included increasing the existing focus on continuous improvement, adopting a user-centric approach to developing software and further enabling a generative culture within the department.</p> <p class="p1">The implementation itself was deliberately flexible. Rather than recommending a one-size-fits-all approach, Google helped FINRA tailor its actions to individual team objectives. Teams prioritizing product value concentrated on lead time and deployment frequency metrics, while teams focused on stability concentrated on change failure rates and<span style="vertical-align: baseline;"> failed deployment recovery time</span>.</p> <p class="p1">Over the first year of implementation, engineering teams demonstrated continuous improvement across DORA capabilities, achieving a 9% per-developer productivity gain and reporting directionally positive developer experience feedback.</p> <p class="p1">Sprint velocities also improved by 5%, enabling smaller engineering teams to deliver greater incremental product value to the business. Beyond raw metrics, teams also reported heightened transparency around delivery performance and appreciation for a standardized methodology.</p> <p class="p1">Looking ahead, FINRA is maturing its DORA practice by providing more granular metrics tied to high-level DORA measurements, increasing emphasis on developer experience and correlating product metrics with software delivery performance indicators.</p> <p class="p1"><em>Want to discover what AI can do for governments, nonprofits, and other public sector organizations? Register to attend our upcoming <a href="https://cloudonair.withgoogle.com/events/gemini-for-government-your-front-door-for-mission-ai" rel="noopener" target="_blank">Gemini for Government webinar on February 5</a>, where we will dive deeper into the transformative technology powering the next wave of innovation across the public sector.</em></p></div>
  55. Senior Product Marketing Manager

    Tue, 09 Dec 2025 17:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">The </span><a href="https://cloud.google.com/blog/products/ai-machine-learning/announcing-the-2025-dora-report"><span style="text-decoration: underline; vertical-align: baseline;">2025 State of AI-assisted Software Development report</span></a><span style="vertical-align: baseline;"> revealed a critical truth: AI is an amplifier. It magnifies the strengths of high-performing organizations and the dysfunctions of struggling ones.</span></p> <p><span style="vertical-align: baseline;">While AI adoption is now near-universal, with 90% of developers using it in their daily workflows, success is not guaranteed. Our cluster analysis of nearly 5,000 technology professionals reveals significant variation in team performance: Not everyone experiences the same outcomes from adopting AI. </span></p> <p><span style="vertical-align: baseline;">From this disparity, we can conclude that how they are using AI is a critical factor. We wanted to understand the particular capabilities and conditions that enable teams to achieve positive outcomes, leading us to develop the </span><a href="https://cloud.google.com/resources/content/2025-dora-ai-capabilities-model-report"><span style="text-decoration: underline; vertical-align: baseline;">DORA AI Capabilities Model report</span></a><span style="vertical-align: baseline;">. </span></p> <p><span style="vertical-align: baseline;">This companion guide to the 2025 DORA Report is designed to help you navigate our new reality. It provides actionable strategies, implementation tactics, and measurement frameworks to help technology leaders build an environment where AI thrives.</span></p> <h3><strong style="vertical-align: baseline;">Seven capabilities that amplify success</strong></h3> <p><span style="vertical-align: baseline;">Successfully using AI requires cultivating your technical and cultural environment. From the same set of respondents who participated in the 2025 DORA survey, we identified seven foundational capabilities that are proven to amplify the positive impact of AI on organizational performance:</span></p> <ol> <li role="presentation"><strong style="vertical-align: baseline;">Clear and communicated AI stance</strong><span style="vertical-align: baseline;">: Ambiguity creates risk. A clear policy provides the psychological safety developers need to experiment effectively.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Healthy data ecosystems</strong><span style="vertical-align: baseline;">: AI is only as good as the data it learns from. Investing in high-quality, accessible, and unified internal data significantly amplifies AI's benefits.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">AI-accessible internal data</strong><span style="vertical-align: baseline;">: This involves "context engineering," moving beyond simple prompts to securely connect AI tools to your internal documentation and codebases.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Strong version control practices</strong><span style="vertical-align: baseline;">: As AI increases the volume and velocity of code generation, version control becomes your critical safety net. Frequent commits and robust rollback capabilities are essential for maintaining stability in an AI-assisted world.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Working in small batches</strong><span style="vertical-align: baseline;">: AI can easily generate massive blocks of code, which are hard to review and test. Enforcing the discipline of small batches counteracts this risk, ensuring that speed translates to product performance rather than instability.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">User-centric focus</strong><span style="vertical-align: baseline;">: Speed is irrelevant if you are moving in the wrong direction. Adopting AI tools can actually harm teams that lack a user-centric focus. Keeping user needs as your North Star is essential for guiding AI-assisted development.</span></li> <li><strong style="vertical-align: baseline;">Quality internal platforms</strong><span style="vertical-align: baseline;">: A platform provides the automated, secure "paved roads" that allow AI benefits to scale across the organization. It prevents individual productivity gains from being lost to downstream bottlenecks.</span></li> </ol></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/dora-ai-capabilities-model.max-1000x1000.jpg" alt="dora-ai-capabilities-model"> </a> <figcaption class="article-image__caption "><p data-block-key="y4u85">The DORA AI Capabilities Model shows which capabilities amplify the effect of AI adoption on</p><p data-block-key="7k909">specific outcomes</p></figcaption> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Where to start: Assessing your team</strong></h3> <p><span style="vertical-align: baseline;">Every organization starts their AI journey differently. To help you prioritize, this report introduces seven distinct team archetypes derived from our cluster analysis. These profiles range from "harmonious high-achievers," who excel in both performance and well-being, to teams facing "foundational challenges" or those stuck in a "legacy bottleneck," where unstable systems undermine morale.</span></p> <p><span style="vertical-align: baseline;">Identifying the profile that best matches your team can help pinpoint the most impactful interventions. For example, a "high impact, low cadence" team might prioritize automation to improve stability, while a team "constrained by process" might focus on reducing friction through a better AI stance.</span></p> <h3><strong style="vertical-align: baseline;">Digging deeper with Value Stream Mapping</strong></h3> <p><span style="vertical-align: baseline;">Once you understand your team's profile, how do you direct your efforts? The report includes a step-by-step facilitation guide for running a Value Stream Mapping (VSM) exercise.</span></p> <p><span style="vertical-align: baseline;">VSM acts as an AI force multiplier. By visualizing your flow from idea to customer, you can identify where work waits and where friction exists. This ensures that the efficiency gains from AI aren't just creating local optimizations that pile up work downstream, but are instead channeled into solving system-level constraints.</span></p> <h3><strong style="vertical-align: baseline;">Get better at getting better</strong></h3> <p><span style="vertical-align: baseline;">AI adoption is an organizational transformation. The greatest returns come not from the tools themselves, but from investing in the foundational systems that enable them.</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/resources/content/2025-dora-ai-capabilities-model-report"><span style="text-decoration: underline; vertical-align: baseline;">Download the full report</span></a></p> </li> <li><span style="vertical-align: baseline;">Join the </span><a href="https://dora.community/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">DORA community</span></a></li> </ul></div>
  56. Practice Lead, SRE

    Mon, 08 Dec 2025 17:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">When was the last time you </span><span style="font-style: italic; vertical-align: baseline;">knew — </span><span style="vertical-align: baseline;">not just </span><span style="font-style: italic; vertical-align: baseline;">hoped</span><span style="vertical-align: baseline;"> — that your disaster recovery plan would work perfectly?</span></p> <p><span style="vertical-align: baseline;">For most of us, the answer is unclear. Sure, you may have a DR plan, a meticulously crafted document stored in a wiki or a shared drive, that gets dusted off for compliance audits or the occasional tabletop drill. You assume its procedures are correct, its contact lists are current, and its dependencies are fully mapped, and you certainly </span><span style="font-style: italic; vertical-align: baseline;">hope</span><span style="vertical-align: baseline;"> it works.</span></p> <p><span style="vertical-align: baseline;">But </span><a href="https://sre.google/prodverbs/?slide=10" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">hope is not a strategy</span></a><span style="vertical-align: baseline;">.</span></p> <p><span style="vertical-align: baseline;">Why wouldn’t it work? One problem is that systems are rarely static anymore. In a world where you deploy new microservices dozens of times per day, make constant configuration changes, and maintain an ever-growing web of third-party API dependencies, the DR plan you wrote last quarter is probably just as useful as one from 10 years ago. </span></p> <p><span style="vertical-align: baseline;">And if the failover does work, will it work well enough to meet the promises you've made to your customers (or board of directors or regulators)? When a key component fails, could you still even meet your target availability and latency targets, a.k.a., your Service Level Objectives (SLOs)?</span></p> <p><span style="vertical-align: baseline;">So, how do you close this gap between your current aspirational DR plan and a DR plan that you actually have confidence in? The answer isn't to write more documents or run more theatrical drills. The answer is to stop </span><span style="font-style: italic; vertical-align: baseline;">assuming</span><span style="vertical-align: baseline;"> and start </span><span style="font-style: italic; vertical-align: baseline;">proving</span><span style="vertical-align: baseline;">.</span></p> <p><span style="vertical-align: baseline;">This is where chaos engineering comes in. Unlike what the name might imply, chaos engineering isn’t a tool for recklessly breaking things. Instead, it’s a framework that provides data-driven confidence in your SLOs under stress. By running controlled experiments that simulate real-world disasters like a database failover or a regional outage, you can quantitatively measure the impact of those failures on your systems’ performance. Chaos engineering is how you transform your DR hypotheses into a proven method to ensure resilience. By validating your plan through experimentation, you create tangible evidence, verifying that your plan will safeguard your infrastructure and keep your promises to customers.</span></p> <h3><strong style="vertical-align: baseline;">Demystifying chaos engineering</strong></h3> <p><span style="vertical-align: baseline;">In a nutshell, chaos engineering is the practice of running controlled, scientific experiments to find weaknesses in your system before they cause a real outage. </span></p> <p><span style="vertical-align: baseline;">At its core, it’s about building confidence in your system’s resilience. The process starts with understanding your system's </span><strong style="vertical-align: baseline;">steady state</strong><span style="vertical-align: baseline;">, which is its normal, measurable, and healthy output. You can't know the true impact of a failure without first defining what "good" looks like. This understanding allows you to form a clear, testable </span><strong style="vertical-align: baseline;">hypothesis</strong><span style="vertical-align: baseline;">: a statement of belief that your system's steady state will persist even when a specific, turbulent condition is introduced.</span></p> <p><span style="vertical-align: baseline;">To test this hypothesis, you then execute a controlled </span><strong style="vertical-align: baseline;">action</strong><span style="vertical-align: baseline;">, which is a precise and targeted failure injected into the system. This isn't random mischief; it's a specific simulation of real-world failures, such as consuming all CPU on a host (</span><strong style="vertical-align: baseline;">resource exhaustion</strong><span style="vertical-align: baseline;">), adding network latency (</span><strong style="vertical-align: baseline;">network failure</strong><span style="vertical-align: baseline;">), or terminating a virtual machine (</span><strong style="vertical-align: baseline;">state failure</strong><span style="vertical-align: baseline;">). While this action is running, automated </span><strong style="vertical-align: baseline;">probes</strong><span style="vertical-align: baseline;"> act as your scientific instruments, continuously monitoring the system's state to measure the effect. </span></p> <p><span style="vertical-align: baseline;">Together, these components form a complete scientific loop: you use a </span><strong style="vertical-align: baseline;">hypothesis</strong><span style="vertical-align: baseline;"> to predict resilience, run an experiment by applying an </span><strong style="vertical-align: baseline;">action</strong><span style="vertical-align: baseline;"> to simulate adversity, and use </span><strong style="vertical-align: baseline;">probes</strong><span style="vertical-align: baseline;"> to measure the impact, turning uncertainty into hard data.</span></p> <h3><strong style="vertical-align: baseline;">Using chaos to validate disaster recovery plans</strong></h3> <p><span style="vertical-align: baseline;">Now that you understand the building blocks of a chaos experiment, you can build the bridge to your ultimate goal: transforming your DR plan from a document of hope into an evidence-based procedure. The key is to stop seeing your DR plan as a set of instructions and start seeing it for what it truly is: a collection of unproven hypotheses.</span></p> <p><span style="vertical-align: baseline;">When you think about it, every significant statement in your DR document is a claim waiting to be tested. When your plan states, </span><span style="font-style: italic; vertical-align: baseline;">"The database will failover to the replica in under 5 minutes,"</span><span style="vertical-align: baseline;"> that isn't a fact, it's a </span><strong style="vertical-align: baseline;">hypothesis</strong><span style="vertical-align: baseline;">. When it says, </span><span style="font-style: italic; vertical-align: baseline;">"In the event of a regional outage, traffic will be successfully rerouted to the secondary region,"</span><span style="vertical-align: baseline;"> that's another hypothesis. Your DR plan is filled with these critical assumptions about how your system </span><span style="font-style: italic; vertical-align: baseline;">should</span><span style="vertical-align: baseline;"> behave under duress. Until you test them, they remain nothing more than educated guesses.</span></p> <p><span style="vertical-align: baseline;">Chaos experiments are the ultimate validation tools, </span><strong style="vertical-align: baseline;">live-fire drills</strong><span style="vertical-align: baseline;"> that put your DR hypotheses to a real, empirical test. Instead of just talking through a scenario, you use controlled </span><strong style="vertical-align: baseline;">actions</strong><span style="vertical-align: baseline;"> to safely and precisely simulate the disaster. You're no longer asking "what if?"; you're actively measuring "what happens when."</span></p> <p><span style="vertical-align: baseline;">For example, imagine you have a DR plan for a regional outage. When you adopt chaos engineering, you break down that plan into a hypothesis and an experiment. For example:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">The hypothesis:</strong><span style="vertical-align: baseline;"> "In case our primary region </span><code style="vertical-align: baseline;">us-central1</code><span style="vertical-align: baseline;"> becomes unreachable, the load balancers will failover all traffic to </span><code style="vertical-align: baseline;">us-east1</code><span style="vertical-align: baseline;"> within 3 minutes, with an error rate below 1%."</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">The chaos experiment:</strong><span style="vertical-align: baseline;"> Run an </span><strong style="vertical-align: baseline;">action</strong><span style="vertical-align: baseline;"> that simulates a regional outage by injecting a "blackhole" that drops all network traffic to and from </span><code style="vertical-align: baseline;">us-central1</code><span style="vertical-align: baseline;"> for a limited time. Your </span><strong style="vertical-align: baseline;">probes</strong><span style="vertical-align: baseline;"> then measure the actual failover time and error rates to validate the hypothesis.</span></p> </li> </ul> <p><span style="vertical-align: baseline;">In other words, by applying the chaos engineering methodology, you systematically move through your DR plan, turning each assumption into a proven fact. You're not just testing your plan; you're forging it in a controlled fire.</span></p> <h3><strong style="vertical-align: baseline;">Connecting chaos readiness to your SLOs</strong></h3> <p><span style="vertical-align: baseline;">Beyond simply proving system availability, chaos engineering builds trust in your reliability metrics, ensuring that you meet your SLOs even when services become unavailable. An SLO is a specific, acceptable target level of your service's performance measured over a specified period that reflects the user's experience. SLOs aren't just internal goals; they are the bedrock of customer trust and the foundation of your contractual service level agreements (SLAs).</span></p> <p><span style="vertical-align: baseline;">A traditional DR drill might get a "pass" because the backup system came online. But what if it took 20 minutes to fail over, during which every user saw errors? What if the backup region was under-provisioned, and performance became so slow that the service was unusable? From a technical perspective, you "recovered." But from a customer's perspective, you were down.</span></p> <p><span style="vertical-align: baseline;">A chaos experiment, however, can help you answer a critical question: </span><strong style="vertical-align: baseline;">"During a failover, did we still meet our SLOs?” </strong><span style="vertical-align: baseline;">Because your probes are constantly measuring performance against your SLOs, you get the full picture. You don't just see that the database failed over; you see that it took 7 minutes, during which your latency SLO was breached and your </span><a href="https://sre.google/sre-book/embracing-risk/#:~:text=Forming%20Your%20Error%20Budget,new%20releases%20can%20be%20pushed." rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">error budget</span></a><span style="vertical-align: baseline;"> was completely burned. This is the crucial, game-changing insight. It shifts the entire goal from simple disaster recovery to </span><strong style="vertical-align: baseline;">SLO preservation</strong><span style="vertical-align: baseline;">, which is what actually determines if a failure was a minor hiccup or a major business-impacting incident. It also provides the data necessary to set goals for system improvement. So the next time you run this experiment, you can measure if and how much your system resilience has improved, and ultimately if you can maintain your SLO during the disaster event.</span></p> <h3><strong style="vertical-align: baseline;">Build a culture of confidence</strong></h3> <p><span style="vertical-align: baseline;">The journey to resilience doesn't start by simulating a full regional failover. It starts with a single, small experiment. The goal is not to boil the ocean; it's to build momentum. Test one timeout, one retry mechanism, or one graceful error message.</span></p> <p><span style="vertical-align: baseline;">The biggest win from your first successful experiment won't be the technical data you gather. It will be the confidence you build. When your team sees that they can safely inject failure, learn from it, and improve the system, their entire relationship with failure changes. Fear is replaced by curiosity. That confidence is the catalyst for building a true, enduring culture of resilience. To learn more and get started with chaos engineering, check out </span><a href="https://cloud.google.com/blog/products/devops-sre/getting-started-with-chaos-engineering?e=48754805"><span style="text-decoration: underline; vertical-align: baseline;">this blog</span></a><span style="vertical-align: baseline;"> and </span><a href="https://sre.google/prodcast/#season3-episode12" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">this podcast</span></a><span style="vertical-align: baseline;">. And if you’re ready to get started, but unsure how, reach out to Google Cloud professional services to discuss how we can help.</span></p></div>
  57. Group Product Manager, Google Cloud

    Mon, 08 Dec 2025 17:00:00 -0000

    <div class="block-paragraph_advanced"><p style="text-align: justify;"><span style="vertical-align: baseline;">Earlier this year, we unveiled a big investment in platform and developer team productivity, with the launch of </span><a href="https://docs.cloud.google.com/application-design-center/docs/overview"><span style="text-decoration: underline; vertical-align: baseline;">Application Design Center</span></a><span style="vertical-align: baseline;">, </span><span style="vertical-align: baseline;">helping them streamline </span><span style="vertical-align: baseline;">the design and deployment of cloud application infrastructure, while ensuring applications are secure, reliable, and aligned with best practices</span><span style="vertical-align: baseline;">. And today, Application Design Center is generally available.</span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">We built Application Design Center to put applications at the center of your cloud experience, with a visual, canvas-style and AI-powered approach to design and modify Terraform-backed application templates. It also offers full lifecycle management that’s aligned with DevOps best practices across application design and deployment.</span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">Application Design Center is a core component of our </span><a href="https://docs.cloud.google.com/hub/docs/application-centric-google-cloud"><span style="text-decoration: underline; vertical-align: baseline;">application-centric cloud experience</span></a><span style="vertical-align: baseline;">. When you use Application Design Center to design and deploy your application infrastructure, your applications are easily discoverable, observable, and manageable. Application Design Center works in concert with </span><a href="https://cloud.google.com/app-hub/docs/overview"><span style="text-decoration: underline; vertical-align: baseline;">App Hub</span></a><span style="vertical-align: baseline;"> to automatically register application deployments, enabling a unified view and control plane for your application portfolio, and </span><a href="https://docs.cloud.google.com/hub/docs/overview"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Hub</span></a><span style="vertical-align: baseline;">, to provide operational insights for your applications.</span></p> <p style="text-align: justify; padding-left: 40px;"><span style="font-style: italic; vertical-align: baseline;">“Google Application Design Center is a valuable enabler for Platform Engineering, providing a structured approach to harmonizing resource creation in Google Cloud Platform. By aligning tools, processes, and technologies, it streamlines workflows, reducing friction between development, operations, and other teams. This harmonization enhances collaboration, accelerates delivery, and ensures consistency across Google Cloud environments.”</span><span style="vertical-align: baseline;"> - </span><strong style="vertical-align: baseline;">Ervis Duraj, Principal Engineer,</strong><span style="vertical-align: baseline;"> </span><strong style="vertical-align: baseline;">MediaMarktSaturn Technology</strong></p> <h3><span style="vertical-align: baseline;">The gateway to an app-centric cloud</span></h3> <p style="text-align: justify;"><span style="vertical-align: baseline;">Our goal with Application Design Center is for you to innovate more, and administer less. It consists of </span><span style="vertical-align: baseline;">four key elements to help you minimize administrative overhead and maximize efficiency, so you can design and deploy applications with integrated best practices and essential guardrails. Let’s take a closer look.</span></p> <p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">1. </span><strong style="vertical-align: baseline;">Terraform </strong><a href="https://docs.cloud.google.com/application-design-center/docs/supported-resources"><strong style="text-decoration: underline; vertical-align: baseline;">components</strong></a><strong style="vertical-align: baseline;"> and </strong><a href="https://docs.cloud.google.com/application-design-center/docs/design-application-templates"><strong style="text-decoration: underline; vertical-align: baseline;">application templates</strong></a><strong style="vertical-align: baseline;"> <br/></strong><span style="vertical-align: baseline;">Develop applications faster with our growing library of opinionated application templates. These provide well-architected patterns and pre-built components, including innovative "AI inference templates" to help you leverage AI to create dynamic and intelligent application foundations. As an example, at launch, Application Design Center provides opinionated templates for Google Kubernetes Engine (GKE) clusters (</span><a href="https://docs.cloud.google.com/application-design-center/docs/configure-gke-standard-cluster"><span style="text-decoration: underline; vertical-align: baseline;">Standard</span></a><span style="vertical-align: baseline;">, </span><a href="https://docs.cloud.google.com/application-design-center/docs/configure-gke-autopilot-cluster"><span style="text-decoration: underline; vertical-align: baseline;">Autopilot</span></a><span style="vertical-align: baseline;"> and </span><a href="https://docs.cloud.google.com/application-design-center/docs/configure-gke-node-pool"><span style="text-decoration: underline; vertical-align: baseline;">NodePool</span></a><span style="vertical-align: baseline;">) to run AI inference workloads using a variety of LLM models, as well as for enterprise-grade production clusters or single-region web app clusters. </span></p> <p><span style="vertical-align: baseline;">You can also </span><a href="https://docs.cloud.google.com/application-design-center/docs/import-components"><span style="text-decoration: underline; vertical-align: baseline;">ingest and manage your existing Terraform configurations</span></a><span style="vertical-align: baseline;"> (“Bring your own Terraform”) directly from Git repositories. Once imported, you can use Application Design Center to design with your own Terraform, or in combination with Google-provided Terraform, to create standardized, opinionated infrastructure patterns for sharing and reuse across your application teams.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/3-_Catalog_Share.gif" alt="3- Catalog Share"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">2. </span><strong style="vertical-align: baseline;">AI-powered design for rapid application designing and prototyping <br/></strong><span style="vertical-align: baseline;">Application Design Center integrates with Google's </span><a href="https://cloud.google.com/gemini/docs/cloud-assist/design-application"><span style="text-decoration: underline; vertical-align: baseline;">Gemini Cloud Assist Design Agent,</span></a><span style="vertical-align: baseline;"> empowering you to design actual, deployable application infrastructure application templates on Google Cloud that you can export as Terraform infrastructure-as-code. </span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">With Gemini Cloud Assist, you can describe your application design intents using natural language. In return, Gemini interactively generates multi-product application template suggestions, complete with visual architecture diagrams and summarized benefits. You can then refine these proposals through multi-turn reasoning or by directly manipulating the architecture within the Application Design Center canvas. </span></p> <p><span style="vertical-align: baseline;">Additionally, all designs that you create with Gemini are automatically observable, optimizable, and enabled for troubleshooting assistance during runtime, thanks to their tight integration with </span><a href="https://cloud.google.com/products/gemini/cloud-assist?hl=en"><span style="text-decoration: underline; vertical-align: baseline;">Gemini Cloud Assist</span></a><span style="vertical-align: baseline;">.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/1-Components_and_templates.gif" alt="1-Components and templates"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">3. </span><strong style="vertical-align: baseline;">A secure, sharable catalog of application templates with full lifecycle management<br/></strong><span style="vertical-align: baseline;">Platform admins can curate a collection of application templates built from Google's best-practice components. This provides developers a trusted, self-service experience from which they can quickly discover and deploy compliant applications. Tight integration with </span><a href="https://docs.cloud.google.com/hub/docs/overview"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Hub</span></a><span style="vertical-align: baseline;"> transforms these governed templates into a live operational command center, complete with unified visibility into the health and deployment status of the resulting applications. This closes the critical loop between design and runtime, so that your production environments reflect your organization’s approved architectural standards.</span></p> <p><span style="vertical-align: baseline;">Also, Application Design Center’s robust </span><a href="https://docs.cloud.google.com/application-design-center/docs/manage-application-instances#create-application-revision"><span style="text-decoration: underline; vertical-align: baseline;">application template revisions</span></a><span style="vertical-align: baseline;"> serve as an immutable audit trail. It automatically detects and flags configuration drift between your intended designs and deployed applications, so that developers can remediate unauthorized changes or safely push approved configuration updates. This helps ensure continuous state consistency and compliance from Day 1 and through the subsequent evolution of your application.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/2-Design_Agent.gif" alt="2-Design Agent"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">4. </span><strong style="vertical-align: baseline;">GitOps integration automating developers’ day-to-day software design lifecycle tasks <br/></strong><span style="vertical-align: baseline;">By integrating Application Design Center into existing CI/CD workflows, platform teams empower developers to own the complete software delivery lifecycle right from their IDE. Developers can leverage compliant application </span><span style="font-style: italic; vertical-align: baseline;">and</span><span style="vertical-align: baseline;"> infrastructure (IaC) code using Application Design Center application templates. </span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">Further, every infrastructure decision made through Application Design Center is committed to code, versioned, and auditable. Specifically, developers can download the application IaC template from Application Design Center and import it into their app repos (the single source of truth), clone their repo, and edit the Terraform directly in their local IDEs. Any modifications go through a Git pull request for review. Once approved, this automatically triggers the existing CI/CD setup to build, test, and deploy both app and infra changes in lockstep. This unified approach minimizes friction, enforcing "golden paths" and providing an end-to-end automated pathway from a line of code in the IDE to a fully deployed change in production. </span></p> <h3 style="text-align: justify;"><span style="vertical-align: baseline;">What's new since preview</span></h3> <p style="text-align: justify;"><span style="vertical-align: baseline;">This GA launch is packed with features that users have been asking for. We’re excited to share powerful new capabilities: enterprise-grade governance and security with </span><a href="https://cloud.google.com/sdk/gcloud/reference/design-center"><span style="text-decoration: underline; vertical-align: baseline;">public APIs and gcloud CLI support</span></a><span style="vertical-align: baseline;">; </span><a href="https://docs.cloud.google.com/application-design-center/docs/set-up-secure-perimeter"><span style="text-decoration: underline; vertical-align: baseline;">full compatibility with VPC service controls</span></a><span style="vertical-align: baseline;">; </span><a href="https://docs.cloud.google.com/application-design-center/docs/import-components"><span style="text-decoration: underline; vertical-align: baseline;">bring your own Terraform</span></a><span style="vertical-align: baseline;"> and </span><a href="https://docs.cloud.google.com/application-design-center/docs/download-and-deploy#export_terraform_code"><span style="text-decoration: underline; vertical-align: baseline;">GitOps support</span></a><span style="vertical-align: baseline;"> for integration with your existing application patterns and automation pipelines; agentic application patterns using GKE templates (</span><a href="https://docs.cloud.google.com/application-design-center/docs/configure-gke-standard-cluster"><span style="text-decoration: underline; vertical-align: baseline;">Standard</span></a><span style="vertical-align: baseline;">, </span><a href="https://docs.cloud.google.com/application-design-center/docs/configure-gke-autopilot-cluster"><span style="text-decoration: underline; vertical-align: baseline;">Autopilot</span></a><span style="vertical-align: baseline;"> and </span><a href="https://docs.cloud.google.com/application-design-center/docs/configure-gke-node-pool"><span style="text-decoration: underline; vertical-align: baseline;">NodePool</span></a><span style="vertical-align: baseline;">); and finally, a simplified onboarding experience with </span><a href="https://docs.cloud.google.com/application-design-center/docs/setup"><span style="text-decoration: underline; vertical-align: baseline;">app-managed project support</span></a><span style="vertical-align: baseline;">, making Application Design Center an AI-powered engine for your applications on Google Cloud.</span></p> <h3 style="text-align: justify;"><span style="vertical-align: baseline;">Get started today</span></h3> <p style="text-align: justify;"><span style="vertical-align: baseline;">To help you get started, Google provides a growing library of curated Google application templates built by experts. These templates combine multiple Google Cloud products and best practices to serve common use cases, which you can configure for deployment, and view as infrastructure as code in-line. Platform teams can then create and securely share the catalogs and collaborate with teammates on designs and self-service deployment for developers. For enterprises with existing Terraform patterns and assets, Application Design Center interoperates by enabling their import and reuse within its native design and configuration experience.</span></p> <p><span style="vertical-align: baseline;">Ready to experience the power of </span><a href="https://docs.cloud.google.com/application-design-center/docs/setup"><span style="text-decoration: underline; vertical-align: baseline;">Application Design Center</span></a><span style="vertical-align: baseline;">? </span><span style="vertical-align: baseline;">You can learn more about ADC and get started building in minutes using the </span><a href="https://docs.cloud.google.com/application-design-center/docs/quickstart-create-template"><span style="text-decoration: underline; vertical-align: baseline;">quickstart</span></a><span style="vertical-align: baseline;">. </span><span style="vertical-align: baseline;">You can start building your first AI-powered application template in minutes, </span><a href="https://cloud.google.com/products/application-design-center/pricing"><span style="text-decoration: underline; vertical-align: baseline;">free of cost</span></a><span style="vertical-align: baseline;">, and quickly deploy applications with working code. For deeper insights, explore the comprehensive public documentation </span><a href="https://docs.cloud.google.com/application-design-center/docs/overview"><span style="text-decoration: underline; vertical-align: baseline;">here</span></a><span style="vertical-align: baseline;">. We can't wait to see how you innovate with the Application Design Center!</span></p></div>
  58. Senior Product Manager

    Wed, 03 Dec 2025 23:00:00 -0000

    <div class="block-paragraph_advanced"><p><strong style="font-style: italic; vertical-align: baseline;">Editor's note</strong><span style="font-style: italic; vertical-align: baseline;">: This blog was updated on Dec. 4, 5, 7, and 12, 2025, with additional guidance on Cloud Armor WAF rule syntax, and WAF enforcement across App Engine Standard, Cloud Functions, and Cloud Run.</span></p> <p><span style="vertical-align: baseline;">Earlier today, Meta and Vercel publicly disclosed two vulnerabilities that expose services built using the popular open-source frameworks </span><strong style="vertical-align: baseline;">React</strong><span style="vertical-align: baseline;"> </span><strong style="vertical-align: baseline;">Server Components</strong><span style="vertical-align: baseline;"> (</span><a href="https://www.cve.org/CVERecord?id=CVE-2025-55182" rel="noopener" target="_blank"><strong style="text-decoration: underline; vertical-align: baseline;">CVE-2025-55182</strong></a><span style="vertical-align: baseline;">) and </span><strong style="vertical-align: baseline;">Next.js </strong><span style="vertical-align: baseline;">to remote code execution risks when used for some server-side use cases. At Google Cloud, we understand the severity of these vulnerabilities, also known as </span><a href="https://react2shell.com/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">React2Shell</span></a><span style="vertical-align: baseline;">, and our security teams have shared their recommendations to help our customers take immediate, decisive action to secure their applications.</span></p> <h3><span style="vertical-align: baseline;">Vulnerability background</span></h3> <p><span style="vertical-align: baseline;">The </span><strong style="vertical-align: baseline;">React Server Components framework</strong><span style="vertical-align: baseline;"> is commonly used for building user interfaces. On Dec. 3, 2025, </span><a href="http://cve.org" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">CVE.org</span></a><span style="vertical-align: baseline;"> assigned this vulnerability as </span><a href="https://www.cve.org/CVERecord?id=CVE-2025-55182" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">CVE-2025-55182</span></a><span style="vertical-align: baseline;">. The official Common Vulnerability Scoring System (CVSS) base severity score has been determined as Critical, a severity of 10.0. </span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Vulnerable versions</strong><span style="vertical-align: baseline;">: React 19.0, 19.1.0, 19.1.1, and 19.2.0</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Patched</strong><span style="vertical-align: baseline;"> in React 19.2.1</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Fix</strong><span style="vertical-align: baseline;">: </span><a href="https://github.com/facebook/react/commit/7dc903cd29dac55efb4424853fd0442fef3a8700" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">https://github.com/facebook/react/commit/7dc903cd29dac55efb4424853fd0442fef3a8700</span></a></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Announcement</strong><span style="vertical-align: baseline;">: </span><a href="https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components</span></a></p> </li> </ul> <p><span style="vertical-align: baseline;">Next.js is a web development framework that depends on React, and is also commonly used for building user interfaces. (The Next.js vulnerability was referenced as </span><a href="https://www.cve.org/CVERecord?id=CVE-2025-66478" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">CVE-2025-66478</span></a><span style="vertical-align: baseline;"> before being marked as a duplicate.)</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Vulnerable versions</strong><span style="vertical-align: baseline;">: Next.js 15.x, Next.js 16.x, Next.js 14.3.0-canary.77 and later canary releases</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Patched</strong><span style="vertical-align: baseline;"> versions are listed </span><a href="https://nextjs.org/blog/CVE-2025-66478#required-action" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">here</span></a><span style="vertical-align: baseline;">.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Fix</strong><span style="vertical-align: baseline;">: </span><a href="https://github.com/vercel/next.js/commit/6ef90ef49fd32171150b6f81d14708aa54cd07b2" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">https://github.com/vercel/next.js/commit/6ef90ef49fd32171150b6f81d14708aa54cd07b2</span></a></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Announcement</strong><span style="vertical-align: baseline;">: </span><a href="https://nextjs.org/blog/CVE-2025-66478" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">https://nextjs.org/blog/CVE-2025-66478</span></a></p> </li> </ul> <p><span style="vertical-align: baseline;">Google Threat Intelligence Group (GTIG) has also published a new report to help understand the </span><a href="https://cloud.google.com/blog/topics/threat-intelligence/threat-actors-exploit-react2shell-cve-2025-55182"><span style="text-decoration: underline; vertical-align: baseline;">specific threats exploiting React2Shell</span></a><span style="vertical-align: baseline;">.</span></p> <p><span style="vertical-align: baseline;">We strongly encourage organizations who manage environments relying on the React and Next.js frameworks to update to the latest version, and take the mitigation actions outlined below.</span></p> <h3><span style="vertical-align: baseline;">Mitigating CVE-2025-55182</span></h3> <p><span style="vertical-align: baseline;">We have created and rolled out a new </span><strong style="vertical-align: baseline;">Cloud Armor web application firewall (WAF) rule</strong><span style="vertical-align: baseline;"> designed to detect and block exploitation attempts related to CVE-2025-55182. This new rule is </span><strong style="vertical-align: baseline;">available now</strong><span style="vertical-align: baseline;"> and is intended to help protect your internet-facing applications and services that use global or regional Application Load Balancers. We recommend deploying this rule as a temporary mitigation while your vulnerability management program patches and verifies all vulnerable instances in your environment.</span></p> <p><span style="vertical-align: baseline;">For customers using </span><a href="https://cloud.google.com/appengine/"><strong style="text-decoration: underline; vertical-align: baseline;">App Engine Standard</strong></a><span style="vertical-align: baseline;">, </span><a href="https://cloud.google.com/functions/"><strong style="text-decoration: underline; vertical-align: baseline;">Cloud Functions</strong></a><span style="vertical-align: baseline;">, </span><a href="https://cloud.google.com/run/"><strong style="text-decoration: underline; vertical-align: baseline;">Cloud Run</strong></a><span style="vertical-align: baseline;">, </span><a href="https://firebase.google.com/products/hosting" rel="noopener" target="_blank"><strong style="text-decoration: underline; vertical-align: baseline;">Firebase Hosting</strong></a><span style="vertical-align: baseline;"> or </span><a href="https://firebase.google.com/products/app-hosting" rel="noopener" target="_blank"><strong style="text-decoration: underline; vertical-align: baseline;">Firebase App Hosting</strong></a><span style="vertical-align: baseline;">, we provide an additional layer of defense for serverless workloads by automatically enforcing platform-level WAF rules that can detect and block the most common exploitation attempts related to CVE-2025-55182.</span></p> <p><span style="vertical-align: baseline;">For </span><a href="https://support.projectshield.google/s/article/Protecting-Your-Website-From-Known-Vulnerabilities" rel="noopener" target="_blank"><strong style="text-decoration: underline; vertical-align: baseline;">Project Shield</strong></a><span style="vertical-align: baseline;"> users, we have deployed WAF protections for all sites and no action is necessary to enable these WAF rules. For long-term mitigation, you will need to patch your origin servers as an essential step to eliminate the vulnerability (see additional guidance below).</span></p> <p><span style="vertical-align: baseline;">Cloud Armor and the Application Load Balancer can be used to deliver and protect your applications and services regardless of whether they are deployed on Google Cloud, on-premises, or on another infrastructure provider. If you are not yet using Cloud Armor and the Application Load Balancer, please follow the guidance further down to get started.</span></p> <p><span style="vertical-align: baseline;">While these platform-level rules and the optional Cloud Armor WAF rules (for services behind an Application Load Balancer) help mitigate the risk from exploits of the CVE, we continue to strongly recommend updating your application dependencies as the primary long-term mitigation.</span></p> <h3><span style="vertical-align: baseline;">Deploying the cve-canary WAF rule for Cloud Armor</span></h3> <p><span style="vertical-align: baseline;">To configure Cloud Armor to detect and protect from CVE-2025-55182, you can use the </span><a href="https://docs.cloud.google.com/armor/docs/waf-rules#cves_and_other_vulnerabilities"><code style="text-decoration: underline; vertical-align: baseline;">cve-canary</code><span style="text-decoration: underline; vertical-align: baseline;"> preconfigured WAF rule</span></a><span style="vertical-align: baseline;"> leveraging the new ruleID that we have added for this vulnerability. This rule is opt-in only, and must be added to your policy even if you are already using the cve-canary rules.</span></p> <p><span style="vertical-align: baseline;">In your Cloud Armor backend security policy, create a new rule and configure the following match condition:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &quot;(has(request.headers[&#x27;next-action&#x27;]) || has(request.headers[&#x27;rsc-action-id&#x27;]) || request.headers[&#x27;content-type&#x27;].contains(&#x27;multipart/form-data&#x27;) || request.headers[&#x27;content-type&#x27;].contains(&#x27;application/x-www-form-urlencoded&#x27;)) &amp;&amp; evaluatePreconfiguredWaf(&#x27;cve-canary&#x27;,{&#x27;sensitivity&#x27;: 0, &#x27;opt_in_rule_ids&#x27;: [&#x27;google-mrs-v202512-id000001-rce&#x27;,&#x27;google-mrs-v202512-id000002-rce&#x27;]})&quot;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3af8efa0&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">This can be accomplished from the Google Cloud console by navigating to Cloud Armor and modifying an existing or creating a new policy.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--medium h-c-grid__col h-c-grid__col--4 h-c-grid__col--offset-4 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/20251205_11am_rule_1.max-1000x1000.png" alt="20251205_11am_rule (1)"> </a> <figcaption class="article-image__caption "><p data-block-key="5admg">Cloud Armor rule creation in the Google Cloud console.</p></figcaption> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p>Alternatively, the gcloud CLI can be used to create or modify a policy with the requisite rule:</p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;gcloud compute security-policies rules create PRIORITY_NUMBER \\\r\n --security-policy SECURITY_POLICY_NAME \\\r\n --expression &quot;(has(request.headers[\&#x27;next-action\&#x27;]) || has(request.headers[\&#x27;rsc-action-id\&#x27;]) || request.headers[\&#x27;content-type\&#x27;].contains(\&#x27;multipart/form-data\&#x27;) || request.headers[\&#x27;content-type\&#x27;].contains(\&#x27;application/x-www-form-urlencoded\&#x27;)) &amp;&amp; evaluatePreconfiguredWaf(\&#x27;cve-canary\&#x27;,{\&#x27;sensitivity\&#x27;: 0, \&#x27;opt_in_rule_ids\&#x27;: [\&#x27;google-mrs-v202512-id000001-rce\&#x27;,\&#x27;google-mrs-v202512-id000002-rce\&#x27;]})&quot; \\\r\n --action=deny-403&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3af8ee80&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Additionally, if you are managing your rules with Terraform, you may implement the rule via the following syntax:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;rule {\r\n action = &quot;deny(403)&quot;\r\n priority = &quot;PRIORITY_NUMBER&quot;\r\n match {\r\n expr {\r\n expression = &quot;(has(request.headers[\&#x27;next-action\&#x27;]) || has(request.headers[\&#x27;rsc-action-id\&#x27;]) || request.headers[\&#x27;content-type\&#x27;].contains(\&#x27;multipart/form-data\&#x27;) || request.headers[\&#x27;content-type\&#x27;].contains(\&#x27;application/x-www-form-urlencoded\&#x27;)) &amp;&amp; evaluatePreconfiguredWaf(\&#x27;cve-canary\&#x27;,{\&#x27;sensitivity\&#x27;: 0, \&#x27;opt_in_rule_ids\&#x27;: [\&#x27;google-mrs-v202512-id000001-rce\&#x27;,\&#x27;google-mrs-v202512-id000002-rce\&#x27;]})&quot;\r\n }\r\n }\r\n description = &quot;Applies protection for CVE-2025-55182 (React/Next.JS)&quot;\r\n }&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3af8ecd0&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">Verifying WAF rule safety for your application and consuming telemetry</span></h3> <p><span style="vertical-align: baseline;">Cloud Armor rules can be </span><a href="https://docs.cloud.google.com/armor/docs/security-policy-overview#preview_mode"><span style="text-decoration: underline; vertical-align: baseline;">configured in preview mode</span></a><span style="vertical-align: baseline;">, a logging-only mode to test or monitor the expected impact of the rule without Cloud Armor enforcing the configured action. We recommend that the new rule described above first be deployed in preview mode in your production environments so that you can see what traffic it would block. </span></p> <p><span style="vertical-align: baseline;">Once you verify that the new rule is behaving as desired in your environment, then you can disable preview mode to allow Cloud Armor to actively enforce it.</span></p> <p><span style="vertical-align: baseline;">Cloud Armor per-request WAF logs are emitted as part of the Application Load Balancer logs to Cloud Logging. To see what Cloud Armor’s decision was on every request, load balancer logging first </span><a href="https://docs.cloud.google.com/load-balancing/docs/https/https-logging-monitoring"><span style="text-decoration: underline; vertical-align: baseline;">needs to be enabled on a per backend service basis</span></a><span style="vertical-align: baseline;">. Once it is enabled, all subsequent Cloud Armor decisions will be logged and can be found in Cloud Logging by </span><a href="https://docs.cloud.google.com/armor/docs/request-logging"><span style="text-decoration: underline; vertical-align: baseline;">following these instructions</span></a><span style="vertical-align: baseline;">.</span></p> <h3><span style="vertical-align: baseline;">Interaction of Cloud Armor rules with </span><span style="vertical-align: baseline;">vulnerability</span><span style="vertical-align: baseline;"> scanning tools</span></h3> <p><span style="vertical-align: baseline;">There has been a proliferation of scanning tools designed to help identify vulnerable instances of React and Next.js in your environments. Many of those scanners are designed to identify the version number of relevant frameworks in your servers and do so by crafting a </span><span style="vertical-align: baseline;">legitimate</span><span style="vertical-align: baseline;"> query and inspecting the response from the server to detect the version of React and </span><span style="vertical-align: baseline;">Next.js</span><span style="vertical-align: baseline;"> that is running. </span></p> <p><span style="vertical-align: baseline;">Our WAF rule is designed to detect and prevent exploit attempts of </span><span style="vertical-align: baseline;">CVE-2025-55182</span><span style="vertical-align: baseline;">. As the scanners discussed above are not attempting an exploit, but sending a safe query to </span><span style="vertical-align: baseline;">elicit</span><span style="vertical-align: baseline;"> a response revealing indications of the version of the software, </span><strong style="vertical-align: baseline;">the above Cloud Armor rule will not detect or block such scanners. </strong></p> <p><span style="vertical-align: baseline;">If the findings of these scanners indicate a vulnerable instance of software protected by Cloud Armor, that does not mean that an actual exploit attempt of the vulnerability will successfully get through your Cloud Armor security policy. Instead, such findings mean that the version React or Next.js detected is known to be vulnerable and should be patched.</span></p> <h3><span style="vertical-align: baseline;">How to get started with Cloud Armor for new users</span></h3> <p><span style="vertical-align: baseline;">If your workload is already using an Application Load Balancer to receive traffic from the internet, you can configure Cloud Armor to protect your workload from this and other application-level vulnerabilities (as well as DDoS attacks) by following </span><a href="https://docs.cloud.google.com/armor/docs/configure-security-policies"><span style="text-decoration: underline; vertical-align: baseline;">these instructions</span></a><span style="vertical-align: baseline;">. </span></p> <p><span style="vertical-align: baseline;">If you are not yet using an Application Load Balancer and Cloud Armor, you can get started with the </span><a href="https://docs.cloud.google.com/load-balancing/docs/https"><span style="text-decoration: underline; vertical-align: baseline;">external Application Load Balancer overview</span></a><span style="vertical-align: baseline;">, the </span><a href="https://docs.cloud.google.com/armor/docs/security-policy-overview"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Armor overview</span></a><span style="vertical-align: baseline;">, and the </span><a href="https://docs.cloud.google.com/armor/docs/best-practices"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Armor best practices</span></a><span style="vertical-align: baseline;">.</span></p> <p><span style="vertical-align: baseline;">If your workload is using </span><a href="http://docs.cloud.google.com/run/"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Run</span></a><span style="vertical-align: baseline;">, </span><a href="https://cloud.google.com/functions"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Run functions</span></a><span style="vertical-align: baseline;">, or </span><a href="https://cloud.google.com/appengine"><span style="text-decoration: underline; vertical-align: baseline;">App Engine</span></a><span style="vertical-align: baseline;"> and receives traffic from the internet, you must first </span><a href="https://docs.cloud.google.com/load-balancing/docs/https/setup-global-ext-https-serverless"><span style="text-decoration: underline; vertical-align: baseline;">set up an Application Load Balancer in front of your endpoint</span></a><span style="vertical-align: baseline;"> to leverage Cloud Armor security policies to protect your workload. You will then need to </span><a href="https://docs.cloud.google.com/armor/docs/integrating-cloud-armor#serverless"><span style="text-decoration: underline; vertical-align: baseline;">configure the appropriate controls</span></a><span style="vertical-align: baseline;"> to ensure that Cloud Armor and the Application Load Balancer can’t be bypassed.</span></p> <h3><span style="vertical-align: baseline;">Best practices and additional risk mitigations</span></h3> <p><span style="vertical-align: baseline;">Once you configure Cloud Armor, we recommend consulting our </span><a href="https://docs.cloud.google.com/armor/docs/best-practices"><span style="text-decoration: underline; vertical-align: baseline;">best practices guide</span></a><span style="vertical-align: baseline;">. Be sure to account for </span><a href="https://docs.cloud.google.com/armor/docs/security-policy-overview#limitations"><span style="text-decoration: underline; vertical-align: baseline;">limitations</span></a><span style="vertical-align: baseline;"> </span><span style="vertical-align: baseline;">discussed in the documentation to minimize risk and optimize performance while ensuring the safety and availability of your workloads. </span></p> <h3><span style="vertical-align: baseline;">Serverless platform protections</span></h3> <p><span style="vertical-align: baseline;">Google Cloud is enforcing platform-level protections across App Engine Standard, Cloud Functions, and Cloud Run to automatically help protect against common exploit attempts of CVE-2025-55182. This protection supplements the protections already in place for Firebase Hosting and Firebase App Hosting.</span></p> <p><strong style="vertical-align: baseline;">What this means for you:</strong></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Applications deployed to those serverless services benefit from these WAF rules that are enabled by default to help provide a base level of protection without requiring manual configuration.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">These rules are designed to block known malicious payloads targeting this vulnerability.</span></p> </li> </ul> <p><strong style="vertical-align: baseline;">Important considerations:</strong></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Patching is still critical:</strong><span style="vertical-align: baseline;"> These platform-level defenses are intended to be a temporary mitigation. The most effective long-term solution is to update your application's dependencies to non-vulnerable versions of React and Next.js, and redeploy them.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Potential impacts:</strong><span style="vertical-align: baseline;"> While unlikely, if you believe this platform-level filtering is incorrectly impacting your application's traffic, please contact </span><a href="https://support.google.com/cloud/answer/6282346" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Google Cloud Support</span></a><span style="vertical-align: baseline;"> and reference issue number 465748820.</span></p> </li> </ul> <h3><span style="vertical-align: baseline;">Long-term mitigation: Mandatory framework update and redeployment</span></h3> <p><span style="vertical-align: baseline;">While WAF rules provide critical frontline defense, the most comprehensive long-term solution is to patch the underlying frameworks.</span></p> <p><strong style="vertical-align: baseline;">While Google Cloud is providing platform-level protections and Cloud Armor options, we urge all customers running React and Next.js applications on Google Cloud to immediately update their dependencies to the latest stable versions (React 19.2.1 or the relevant version of Next.js listed </strong><a href="https://nextjs.org/blog/CVE-2025-66478#required-action" rel="noopener" target="_blank"><strong style="text-decoration: underline; vertical-align: baseline;">here</strong></a><strong style="vertical-align: baseline;">), and redeploy their services.</strong></p> <p><span style="vertical-align: baseline;">This applies specifically to applications deployed on:</span></p> <ul> <li role="presentation"><strong style="vertical-align: baseline;">Cloud Run, Cloud Run functions, or App Engine</strong><span style="vertical-align: baseline;">: Update your application dependencies with the updated framework versions and redeploy.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Google Kubernetes Engine (GKE)</strong><span style="vertical-align: baseline;">: Update your container images with the latest framework versions and redeploy your pods.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Compute Engine</strong><span style="vertical-align: baseline;">:</span><strong style="vertical-align: baseline;"> </strong><span style="vertical-align: baseline;">The public OS images provided by Google Cloud do not have React or Next.js packages installed by default. If you have installed a custom OS with the affected packages, update your workloads to include the latest framework versions and enable WAF rules in front of all workloads.</span></li> <li role="presentation"><strong style="vertical-align: baseline;">Firebase</strong><span style="vertical-align: baseline;">:</span><strong style="vertical-align: baseline;"> </strong><span style="vertical-align: baseline;">If you’re using Cloud Functions for Firebase, Firebase Hosting, or Firebase App Hosting, update your application dependencies with the updated framework versions and redeploy. Firebase Hosting and App Hosting are also automatically enforcing a rule to limit exploitation of CVE-2025-55182 through requests to custom and default domains.</span></li> </ul> <p><span style="vertical-align: baseline;">Patching your applications is an essential step to eliminate the vulnerability at its source and ensure the continued integrity and security of your services.</span></p> <p><span style="vertical-align: baseline;">We will continue to monitor the situation closely and provide further updates and guidance as necessary. Please refer to our official </span><a href="https://docs.cloud.google.com/support/bulletins#gcp-2025-072"><span style="text-decoration: underline; vertical-align: baseline;">Google Cloud Security advisories</span></a><span style="vertical-align: baseline;"> for the most current information and detailed steps.</span></p> <p><span style="vertical-align: baseline;">If you have any questions or require assistance, please contact </span><a href="https://support.google.com/cloud/answer/6282346" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Google Cloud Support</span></a><span style="vertical-align: baseline;"> and reference issue number 465748820.</span></p></div>
  59. Key Enterprise Architect

    Mon, 13 Oct 2025 16:00:00 -0000

    <div class="block-paragraph"><p data-block-key="6kd7s">As engineers, we all dream of perfectly resilient systems — ones that scale perfectly, provide a great user experience, and never ever go down. What if we told you the key to building these kinds of resilient systems isn't avoiding failures, but deliberately causing them? Welcome to the world of chaos engineering, where you stress test your systems by <i>introducing</i> chaos, i.e., failures, into a system under a controlled environment. In an era where downtime can cost millions and destroy reputations in minutes, the most innovative companies aren't just waiting for disasters to happen — they're causing them and learning from the resulting failures, so they can build immunity to chaos before it strikes in production.</p><p data-block-key="396qd">Chaos engineering is useful for all kinds of systems, but particularly for cloud-based distributed ones. Modern architectures have evolved from monolithic to microservices-based systems, often comprising hundreds or thousands of services. These complex service dependencies introduce multiple points of failure, and it’s difficult if not impossible to predict all the possible failure modes through traditional testing methods. When these applications are deployed on the cloud, they are deployed across multiple availability zones and regions. This increases the likelihood of failure due to the highly distributed nature of cloud environments and the large number of services that coexist within them.</p><p data-block-key="93kcq">A common misconception is that cloud environments automatically provide application resiliency, eliminating the need for testing. Although cloud providers do offer various levels of resiliency and SLAs for their cloud products, these alone do not guarantee that your business applications are protected. If applications are not designed to be fault-tolerant or if they assume constant availability of cloud services, they will fail when a particular cloud service they depend on is not available.</p><p data-block-key="62d5j">In short, chaos engineering can take a team's worst "what if?" scenarios and transform them into well-rehearsed responses. Chaos engineering isn’t about breaking systems — engineering chaotically, as it were — it's about building teams that face production incidents with the calm confidence that only comes from having weathered that chaos before, albeit in controlled conditions.</p><p data-block-key="aipko">Google Cloud’s Professional Service Organization (PSO) Enterprise Architecture team consults on and provides hands-on expertise on customers’ cloud transformation journeys, including application development, cloud migrations, and enterprise architecture. And when advising on designing resilient architecture for cloud environments, we routinely introduce the principles and practices of chaos engineering and Site Reliability Engineering (SRE) practices.</p><p data-block-key="6ro3d">In this first blog post in a series, we explain the basics of chaos engineering — what it is and its core principles and elements. We then explore how chaos engineering is particularly helpful and important for teams running distributed applications in the cloud. Finally, we’ll talk about how to get started, and point you to further resources.</p><h2 data-block-key="pqp"><b>Understanding chaos engineering</b></h2><p data-block-key="fun25">Chaos engineering is a methodology invented by Netflix in 2010 when it created and popularized ‘Chaos Monkey’ to address the need to build more resilient and reliable systems in the face of increasing complexity in their AWS environment. Around the same time, Google introduced Disaster Resilience Testing, or DiRT, which enabled continuous and automated disaster readiness, response, and recovery of Google’s business, systems, and data. Here on Google Cloud’s PSO team, we offer various services to help customers implement DiRT as part of SRE practices. These offerings also include training on how to perform DiRT on applications and systems operating on Google Cloud. The central concept is straightforward: deliberately introduce controlled disruptions into a system to identify vulnerabilities, evaluate its resilience, and enhance its overall reliability.</p><p data-block-key="6t531">As a proactive discipline, chaos engineering enables organizations to identify weaknesses in their systems before they lead to significant outages or failures, where a system includes not only the technology components but also the people and processes of an organization. By introducing controlled, real-world disruptions, chaos engineering helps test a system's robustness, recoverability, and fault tolerance. This approach allows teams to uncover potential vulnerabilities, so that systems are better equipped to handle unexpected events and continue functioning smoothly under stress.</p><h3 data-block-key="59nsr"><b>Principles and practices of chaos engineering</b></h3><p data-block-key="df1o7">Chaos engineering is guided by a set of core principles about why it should be done, while practices define what needs to be done.</p><p data-block-key="8ao4o">Below are the principles of chaos engineering:</p><ol><li data-block-key="ftol1"><b>Build a hypothesis around steady state</b>: Prior to initiating any disruptive actions, you need to define what "normal" looks like for your system, commonly referred to as the "steady state hypothesis."</li><li data-block-key="6vvb8"><b>Replicate real-world conditions</b>: Chaos experiments should emulate realistic failure scenarios that the system might encounter in a production environment.</li><li data-block-key="decbe"><b>Run experiments in production</b>: Chaos engineering is firmly rooted in the belief that only a production environment with real traffic and dependencies can provide an accurate picture of resiliency. This is what separates chaos engineering from traditional testing.</li><li data-block-key="3de29"><b>Automate experiments:</b> Make resiliency testing part of a continuous ongoing process rather than a one-off test.</li><li data-block-key="am2bk"><b>Determine the blast radius</b>: Experiments should be meticulously designed to minimize adverse impacts on production systems. This requires categorizing applications and services in different tiers based on the impact the experiments can have on customers and other applications and services.</li></ol><p data-block-key="hldj">With these principles established, follow these practices when conducting a chaos engineering experiment:</p><ol><li data-block-key="1bkn"><b>Define steady state:</b> Identifies the specific metrics (e.g., latency, throughput) that you will look at and establish a baseline for them.</li><li data-block-key="c86r7"><b>Formulate a hypothesis</b>: This is the practice of creating a single testable statement, for example, ‘By deleting this container pod, user login will not be affected’. Hypotheses are generally created by identifying customer user journeys and deriving test scenarios from them.</li><li data-block-key="39bql"><b>Use a controlled environment:</b> While one chaos engineering principle states that experiments need to run in production, you should still start small and run your experiment in a non-production environment first, learn and adjust, and then gradually expand the scope to production environment.</li><li data-block-key="gtlb"><b>Inject failures</b>: This is the practice of causing disruption by injecting failures either directly into the system (e.g., deleting a VM, stopping a database instance) or indirectly by injecting failures in the environment (e.g. deleting a network route, adding a firewall rule).</li><li data-block-key="1410c"><b>Automate experimental execution</b>: Automation is crucial for establishing chaos engineering as a repeatable and scalable practice. This includes using automated tools for fault injection (e.g., making it part of a CI/CD pipeline) and automated rollback mechanisms.</li><li data-block-key="58mg2"><b>Derive actionable insights</b>: The primary objective of using chaos engineering is to gain insights into system vulnerabilities, thereby enhancing resilience. This involves rigorous analysis of experimental results; identifying weaknesses and areas for improvement; and disseminating findings to relevant teams to inform subsequent experimental design and system enhancements.</li></ol><p data-block-key="fh7in">In other words, chaos engineering isn't about breaking things for the sake of it, but about building more resilient systems by understanding their limitations and addressing them proactively.</p><h3 data-block-key="ftslk"><b>Elements of chaos engineering</b></h3><p data-block-key="evq8f">Here are the core elements you'll use in a chaos engineering experiment, derived from these five principles:</p><ul><li data-block-key="2isvq"><b>Experiments</b>: A chaos experiment constitutes a deliberate, pre-planned procedure wherein faults are introduced into a system to ascertain its response.</li><li data-block-key="d6djm"><b>Steady-state hypotheses</b>: A steady-state hypothesis defines the baseline operational state, or "normal" behavior, of the system under evaluation.</li><li data-block-key="3d8o5"><b>Actions</b>: An action represents a specific operation executed upon the system being experimented on.</li><li data-block-key="bpbv8"><b>Probes</b>: A probe provides a mechanism for observing defined conditions within the system during experimentation.</li><li data-block-key="f50fb"><b>Rollbacks</b>: An experiment may incorporate a sequence of actions designed to reverse any modifications implemented during the experiment.</li></ul><h2 data-block-key="327mk"><b>Getting started with chaos engineering</b></h2><p data-block-key="123gj">Now that you have a good understanding of chaos engineering and why to use it in your cloud environment, the next step is to try it out for yourself in your own development environment.</p><p data-block-key="6i4s2">There are multiple chaos engineering solutions in the market; some are paid products and some are open-source frameworks. To get started quickly, we recommend that you use <a href="https://chaostoolkit.org/" target="_blank">Chaos Toolkit</a> as your chaos engineering framework.</p><p data-block-key="atl4d">Chaos Toolkit is an open-source framework written in Python that provides a modular architecture where you can plug in other libraries (also known as ‘drivers’) to extend your chaos engineering experiments. For example, there are extension libraries for <a href="https://chaostoolkit.org/drivers/gcp/" target="_blank">Google Cloud</a>, <a href="https://chaostoolkit.org/drivers/kubernetes/" target="_blank">Kubernetes</a>, and many other technologies. Since Chaos Toolkit is a Python-based developer tool, you can begin by configuring your Python environment. You can find a good example of a Chaos Toolkit experiment and step-by-step explanation <a href="https://chaostoolkit.org/reference/tutorial/#getting-started-with-the-chaos-toolkit" target="_blank">here</a>.</p><p data-block-key="r2pl">Finally, to enable Google Cloud customers and engineers to introduce chaos testing in their applications, we’ve created a series of Google Cloud-specific chaos engineering recipes. Each recipe covers a specific scenario to introduce chaos in a particular Google Cloud service. For example, one recipe covers introducing chaos in an application/service running behind a Google Cloud internal or external application load balancer; another recipe covers simulating a network outage between an application running on Cloud Run and connecting to a Cloud SQL database by leveraging another Chaos Toolkit extension named <a href="https://chaostoolkit.org/drivers/toxiproxy/" target="_blank">ToxiProxy</a>.</p><p data-block-key="7bkoj">You can find a complete collection of recipes, including step-by-step instructions, scripts, and sample code, to learn how to introduce chaos engineering in your Google Cloud environment on <a href="https://github.com/GoogleCloudPlatform/chaos-engineering/blob/main/Chaos-Engineering-Recipes-Book.md" target="_blank">GitHub</a>. Then, stay tuned for subsequent posts, where we’ll talk about chaos engineering techniques, such as how to introduce faults into your Google Cloud environment.</p></div>
  60. Researcher

    Tue, 23 Sep 2025 14:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Today, we are excited to announce the </span><a href="http://cloud.google.com/dora"><span style="text-decoration: underline; vertical-align: baseline;">2025 DORA Report: State of AI-assisted Software Development</span></a><span style="vertical-align: baseline;">. Drawing on insights from over 100 hours of qualitative data and survey responses from nearly 5,000 technology professionals from around the world. </span></p> <p><span style="vertical-align: baseline;">The report reveals a key insight: AI doesn't fix a team; it amplifies what's already there. Strong teams use AI to become even better and more efficient. Struggling teams will find that AI only highlights and intensifies their existing problems. The greatest return comes not from the AI tools themselves, but from a strategic focus on the quality of internal platforms, the clarity of workflows, and the alignment of teams.</span></p> <h3><strong style="vertical-align: baseline;">AI, the great amplifier</strong></h3> <p><span style="vertical-align: baseline;">As we established from the </span><a href="https://dora.dev/research/2024/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">2024 report</span></a><span style="vertical-align: baseline;"> as well as the special report published this year called </span><a href="https://dora.dev/research/ai/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">“Impact of Generative AI in Software Development”</span></a><span style="vertical-align: baseline;">, organizations are continuing to heavily adopt AI and receive substantial benefits across important outcomes. And there is evidence of learning to better integrate these tools into our workflow. Unlike last year, we observe a positive relationship between AI adoption on both software delivery throughput and product performance. It appears that people, teams, and tools are learning where, when, and how AI is most useful. However, AI adoption does continue to have a negative relationship with software delivery stability.</span></p> <p><span style="vertical-align: baseline;">This confirms our central theory - AI accelerates software development, but that acceleration can expose weaknesses downstream. Without robust control systems, like strong automated testing, mature version control practices, and fast feedback loops, an increase in change volume leads to instability. Teams working in loosely coupled architectures with fast feedback loops see gains, while those constrained by tightly coupled systems and slow processes see little or no benefit.</span></p> <p><strong style="vertical-align: baseline;">Key findings from the 2025 report</strong></p> <p><span style="vertical-align: baseline;">Beyond this central theme, this year’s research highlighted the following about modern software development:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">AI adoption is near-universal</strong><span style="vertical-align: baseline;">: 90% of survey respondents report using AI at work. More than 80% believe it has increased their productivity. However, skepticism remains as 30% report little or no trust in the code generated by AI, a slightly lower percentage than last year but a key trend to note.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">User-centricity is a prerequisite for AI success</strong><span style="vertical-align: baseline;">: AI becomes most useful when it's pointed at a clear problem, and a user-centric focus provides that essential direction. Our data shows this focus amplifies AI’s positive influence on team performance.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Platform engineering is the foundation</strong><span style="vertical-align: baseline;">: Our data shows that 90% of organizations have adopted at least one platform and there is a direct correlation between a high quality internal platform and an organization’s ability to unlock the value of AI, making it an essential foundation for success.</span></p> </li> </ul> <h3><strong style="vertical-align: baseline;">The seven team archetypes</strong></h3> <p><span style="vertical-align: baseline;">Simple software delivery metrics alone aren’t sufficient. They tell you what is happening but not why it’s happening. To connect performance data to experience, we conducted a cluster analysis that reveals seven common team profiles or archetypes, each with a unique interplay of performance, stability, and well-being. This model provides leaders with a way to diagnose team health and apply the right interventions. </span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/2_YtpOb3P.max-1000x1000.jpg" alt="2"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">The ‘Foundational challenges’ group are trapped in survival mode and face significant gaps in their processes and environment, leading to low performance, high system stability, and high levels of burnout and friction. While the ‘Harmonious high achievers’ excel across multiple areas, showing positive metrics for team well-being, product outcomes, and software delivery. </span></p> <p><span style="vertical-align: baseline;">Read more details of each archetype in the "Understanding your software delivery performance: A look at seven team profiles" chapter of the report.</span></p> <h3><strong style="vertical-align: baseline;">Unlocking the value of AI with the ‘DORA AI Capabilities Model’</strong></h3> <p><span style="vertical-align: baseline;">This year, we went beyond identifying AI’s impact to investigating the conditions in which AI-assisted technology-professionals  realize the best outcomes. The value of AI is unlocked not by the tools themselves, but by the surrounding technical practices and cultural environment.</span></p> <p><span style="vertical-align: baseline;">Our research identified seven capabilities that are shown to magnify the positive impact of AI in organizations.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/DORA_inline_2.max-1000x1000.png" alt="image1"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Where leaders should get started</strong></h3> <p><span style="vertical-align: baseline;">One of the key insights derived from the research this year is that the value of AI will be unlocked by reimagining the system of work it inhabits. Technology leaders should treat AI adoption as an organizational transformation.</span></p> <p><span style="vertical-align: baseline;">Here’s where we suggest you begin:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Clarify and socialize your AI policies</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Connect AI to your internal context</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Prioritize foundational practices</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Fortify your safety nets</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Invest in your internal platform</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Focus on your end-users</span></p> </li> </ul> <p><span style="vertical-align: baseline;">The </span><a href="https://dora.dev/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">DORA research program</span></a><span style="vertical-align: baseline;"> is committed to serving as a compass to teams and organizations as we navigate the important and transformative period with AI. We hope the new team profiles and the DORA AI capabilities model provide a clear roadmap for you to move beyond simply adopting AI to unlocking its value by investing in teams and people. We look forward to learning how you put these insights into practice. To learn more:</span></p> <ul> <li role="presentation"><a href="http://cloud.google.com/dora"><span style="text-decoration: underline; vertical-align: baseline;">Download</span></a><span style="vertical-align: baseline;"> the full report</span></li> <li role="presentation"><span style="vertical-align: baseline;">Join the </span><a href="https://dora.community/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">DORA community</span></a></li> <li><span style="vertical-align: baseline;">Share this </span><a href="https://dora.dev/research/2025/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">overview</span></a><span style="vertical-align: baseline;"> with your colleagues</span></li> </ul></div>
  61. Cloud Solutions Architect Manager, Google Cloud

    Wed, 13 Aug 2025 16:00:00 -0000

    <div class="block-paragraph"><p data-block-key="bgr19">What guides your approach to software development? In our roles at Google, we’re constantly working to build better software, faster. Within Google, our Developer Platform team and Google Cloud have a strategic partnership and a shared strategy: together, we take our internal capabilities and engineering tools and package them up for Google Cloud customers.</p><p data-block-key="e2l3s">At the heart of this is understanding the many ways that software teams, big and small, need to balance efficiency, quality, and cost, all while delivering value. In our recent <a href="https://www.youtube.com/watch?v=T6a9gPSoqxo" target="_blank">talk at PlatformCon 2025</a>, we shared key parts of our platform strategy, which we call “shift down.”</p><p data-block-key="d6oe8"><b>Shift down is an approach that advocates for embedding decisions and responsibilities into underlying internal developer platforms (IDPs)</b>, thereby reducing the operational burden on developers. This contrasts with the <a href="https://cloud.google.com/devops">DevOps</a> trend of "shift left," which pushes more effort earlier into the development cycle, a method that is proving difficult at scale due to the sheer volume and rate of change in requirements. Our shift down strategy helps us maximize value with existing resources so businesses can achieve high innovation velocity with acceptable quality, acceptable risk, and sustainable costs across a diverse range of business models. In the talk, we share learnings that have been really helpful to us in our software and <a href="https://cloud.google.com/solutions/platform-engineering">platform engineering</a> journey:</p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/image1_98vVMdt.max-1000x1000.jpg" alt="image1"> </a> </figure> </div> </div> </div> <div class="block-aside"><dl> <dt>aside_block</dt> <dd>&lt;ListValue: []&gt;</dd> </dl></div> <div class="block-paragraph"><ol><li data-block-key="bgr19"><b>Work backwards from the business model:</b> By starting with the business model, organizations can intentionally guide platform evolution and investment to align with desired margins, risk tolerance, and quality requirements. At Google, our central platform must support diverse business models, necessitating continuous strategic refinement and adaptation.</li><li data-block-key="fs6ra"><b>Focus on quality attributes for central software control:</b> Quality attributes, such as reliability, security, efficiency, and performance, are <a href="https://en.wikipedia.org/wiki/Emergence" target="_blank">emergent</a> properties of software systems and are important for creating business value and managing risk. These are often referred to as “non-functional requirements” because they define how our software behaves, not what it functionally does. With a shift down strategy, we can embed the responsibility for assuring quality attributes directly into the underlying platform systems and infrastructure, thereby significantly reducing the operational burden on individual developers.</li><li data-block-key="5a5sh"><b>Abstractions and coupling are key technical tools to gain control of quality attributes:</b> We define two key technical components in the way we build platforms: <i>abstractions</i> and <i>coupling</i>. In a shift down strategy, abstractions provide understandability, risk management levers, accountability, and cost control by encapsulating complexity. Coupling refers to the interconnectedness and interdependence of components within a system or development ecosystem. For a successful shift down strategy, the right degree of coupling is crucial because it allows the development platform and ecosystem design to directly implement and influence quality attributes. In fact, coupling is how we offer entire infrastructure and platform solutions as coherent services like <a href="https://cloud.google.com/kubernetes-engine">Google Kubernetes Engine</a> (GKE).</li><li data-block-key="2pktp"><b>Shared responsibility, education, and policy are equally important social tools:</b> Shared responsibility is a crucial social tool within software at scale. This is actively cultivated through education, such as training engineers on platform and AI usage, and fostering a "one team" culture that encourages a shift from artifact-bound identities to overarching mission goals and client-focused engagement. Furthermore, explicit policies like centrally enforced style guides and secure-by-design APIs are fundamental for embedding quality attribute assurance directly into the platform and infrastructure, significantly reducing the operational burden on individual developers by ensuring consistency and automated controls at scale.</li><li data-block-key="bh7kd"><b>Use a map.</b> Supporting many business units with one platform is a vast and complex problem; we need a map. The ecosystem model is a framework that categorizes different types of software development environments, ranging from highly flexible, developer-controlled systems to highly opinionated, vertically integrated ones where the ecosystem itself assures quality attributes. Its critical purpose is to provide a visual and conceptual tool for evaluating how well our ecosystem controls match our business risk. This helps us ensure that the level of oversight and assurance of quality attributes aligns with the potential cost of mistakes. The goal is to be in the "ecosystem effectiveness zone," where controls are balanced to mitigate significant risks from human error without imposing overly restrictive systems that negatively impact velocity and developer satisfaction.</li></ol></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/1_xiA9TUH.max-1000x1000.png" alt="1"> </a> </figure> </div> </div> </div> <div class="block-paragraph"><p data-block-key="bgr19">6. <b>Divide up the problem space by identifying different platform and ecosystem types.</b></p><p data-block-key="dk549">Because the developer experience and platform infrastructure change with scale and degree of shifting down, it’s not enough to just know where the ecosystem effectiveness zone is — you have to identify the ecosystem by type. We differentiate ecosystem types by the degree of oversight and assurance for quality attributes. As an ecosystem becomes more vertically integrated, such as Google's highly optimized "Assured" (Type 4) ecosystem, the platform itself assumes increasing responsibility for vital quality attributes, allowing specialists like site reliability engineers (SRE) and security teams to have full ownership in taking action through large-scale observability and embedded capabilities. Conversely, in less uniform "YOLO," "AdHoc," or "Guided" (Type 0-2) ecosystems, developers have more responsibility for assuring these attributes, while central specialist teams have less direct control and enforcement mechanisms are less pervasive. It’s really important to note here that this is <b>not</b> a maturity model — the best ecosystem and platform type is the one that best fits your business need (see point #1 above!).</p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/2_SQqhW9d.max-1000x1000.png" alt="2"> </a> </figure> </div> </div> </div> <div class="block-paragraph"><h3 data-block-key="bgr19"><b>Intentional choices in platform engineering</b></h3><p data-block-key="2cujr">The most important takeaway is to make active choices. Tailor platform engineering for each business unit and application to achieve the best outcomes. Place critical emphasis on identifying and solving stable sub-problems in reliable, reusable ways across various business problems. This approach directly underpins our "shift down" strategy, moving toward composable platforms that embed decisions and responsibilities for software quality directly into the underlying platform infrastructure, thereby improving our ability to maximize business value with the right resources, at the right quality level, and with sustainable costs.</p><p data-block-key="8q0du"><a href="https://www.youtube.com/watch?v=T6a9gPSoqxo" target="_blank">Watch our full discussion</a> for more insights on effective platform engineering.</p></div>
  62. Product Manager

    Mon, 04 Aug 2025 16:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Application owners are looking for three things when they think about optimizing cloud costs:</span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">What are the most expensive resources?</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Which resources are costing me more this week or month?</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">Which resources are poorly utilized?</span></p> </li> </ol> <p><span style="vertical-align: baseline;">To help you answer these questions quickly and easily, we </span><a href="https://cloud.google.com/blog/products/application-development/an-application-centric-ai-powered-cloud?e=13802955"><span style="text-decoration: underline; vertical-align: baseline;">announced</span></a><span style="vertical-align: baseline;"> Cloud Hub Optimization and Cost Explorer, in private preview, at Google Cloud Next 2025. And today, we are excited to announce that both Cloud Hub Optimization and Cost Explorer are now in public preview.</span></p> <h2><span style="vertical-align: baseline;">Application cost and utilization</span></h2> <p><span style="vertical-align: baseline;">As an app owner, your primary objective is keeping your application healthy at all times. Yet, monitoring all the individual components of your application, which may straddle dozens of Projects, can be quite overwhelming. </span><a href="https://cloud.google.com/products/app-hub"><span style="text-decoration: underline; vertical-align: baseline;">AppHub Applications</span></a><span style="vertical-align: baseline;"> allow you to reorganize cloud around your application, giving you the information and controls you need at your fingertips.</span></p> <p><span style="vertical-align: baseline;">In addition to supporting Google Cloud Projects, Cloud Hub Optimization and Cost Explorer leverage </span><a href="https://cloud.google.com/products/app-hub"><span style="text-decoration: underline; vertical-align: baseline;">App Hub</span></a><span style="vertical-align: baseline;"> applications to show you the cost-efficiency of your application’s workloads and services instantly. This is great for instance when you are trying to pinpoint deployments running on GKE clusters that might be wasting valuable resources, such as GPUs.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/1_CHO_utilization_summary_app.max-1000x1000.jpg" alt="1_CHO_utilization summary app"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h2><span style="vertical-align: baseline;">Not just another cost dashboard</span></h2> <p><span style="vertical-align: baseline;">When you bring up Cloud Hub Optimization, you can immediately see the resources that are costing you the most, along with the percentage change in their cost. With this highly granular cost information, you can now attribute your costs to specific resources and resource owners to reason about any changes in costs.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/2_CHO_cost_summary.max-1000x1000.jpg" alt="2_CHO_cost summary"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">We have additionally integrated granular cost data from Cloud Billing and resource utilization data from Cloud Monitoring to give you a comprehensive picture of your cost efficiency. This includes average vCPU utilization for your Project, which helps you find the most promising optimization candidates across hundreds of Google Cloud Projects.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/3_CHO_utilization_summary_project.max-1000x1000.jpg" alt="3_CHO_utilization summary project"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">The Cost Explorer dashboard also shows you your costs logically organized at the product level, for even more cost explainability. Instead of seeing a lump sum cost for Compute Engine, you can now see your exact spend on individual products including Google Kubernetes Engine (GKE) clusters, Persistent Disks, Cloud Load Balancing, and more.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/4_CHO_cost_explorer.max-1000x1000.jpg" alt="4_CHO_cost explorer"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h2><strong style="vertical-align: baseline;">Simple is powerful</strong></h2> <p><span style="vertical-align: baseline;">Customers who have tried these new tools love the information that is surfaced as well as the simplicity of the interfaces.</span></p> <p style="padding-left: 40px;"><span style="font-style: italic; vertical-align: baseline;">“My team has to keep an eye on cloud costs across tens of business units and hundreds of developers. The Cloud Hub Optimization and Cost Explorer dashboards are a force multiplier for my team as they tell us where to look for cost savings and potential optimization opportunities.”</span><span style="vertical-align: baseline;"> - Frank Dice, Principal Cloud Architect, Major League Baseball</span></p> <p><span style="vertical-align: baseline;">Customers especially appreciate the </span><a href="https://cloud.google.com/stackdriver/docs/costs/optimize-costs#supported_products"><span style="text-decoration: underline; vertical-align: baseline;">breadth of product coverage</span></a><span style="vertical-align: baseline;"> available out of the box without any additional setup, and the fact that there is no additional charge to using these features.</span></p> <h2><strong style="vertical-align: baseline;">What’s next</strong></h2> <p><span style="vertical-align: baseline;">As your organization “shifts left” on cloud cost management, we are working to help application owners and developers understand and optimize their cloud costs. You can try Cloud Hub Optimize and Cost Explorer </span><a href="https://console.cloud.google.com/cloud-hub/optimization"><span style="text-decoration: underline; vertical-align: baseline;">here</span></a><span style="vertical-align: baseline;">.</span></p> <p><span style="vertical-align: baseline;">You can also see a live demo of how Cloud Hub Optimization and Cost Explorer can be used to identify underutilized GKE clusters within seconds in the Google Cloud Next 2025 talk Maximize Your Cloud ROI.</span></p></div> <div class="block-video"> <div class="article-module article-video "> <figure> <a class="h-c-video h-c-video--marquee" href="https://youtube.com/watch?v=7csgD3iIc2Q" data-glue-modal-trigger="uni-modal-7csgD3iIc2Q-" data-glue-modal-disabled-on-mobile="true"> <div class="article-video__aspect-image" style="background-image: url(https://storage.googleapis.com/gweb-cloudblog-publish/images/maxresdefault_LGJSUja.max-1000x1000.jpg);"> <span class="h-u-visually-hidden">Maximize your cloud ROI: A practical approach to efficiency and optimization</span> </div> <svg role="img" class="h-c-video__play h-c-icon h-c-icon--color-white"> <use xlink:href="#mi-youtube-icon"></use> </svg> </a> </figure> </div> <div class="h-c-modal--video" data-glue-modal="uni-modal-7csgD3iIc2Q-" data-glue-modal-close-label="Close Dialog"> <a class="glue-yt-video" data-glue-yt-video-autoplay="true" data-glue-yt-video-height="99%" data-glue-yt-video-vid="7csgD3iIc2Q" data-glue-yt-video-width="100%" href="https://youtube.com/watch?v=7csgD3iIc2Q" ng-cloak> </a> </div> </div> <div class="block-paragraph_advanced"><hr/> <p><sup><span style="font-style: italic; vertical-align: baseline;">Major League Baseball trademarks and copyrights are used with permission of Major League Baseball. Visit MLB.com.</span></sup></p></div>
  63. Senior Product Manager

    Fri, 01 Aug 2025 16:00:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Are you ready to unlock the power of Google Cloud and want guidance on how to set up your environment effectively? Whether you're a cloud novice or part of an experienced team looking to migrate critical workloads, getting your foundational infrastructure right is the key to success. That's where </span><a href="https://cloud.google.com/docs/enterprise/setup-checklist"><strong style="text-decoration: underline; vertical-align: baseline;">Google Cloud Setup</strong></a><span style="vertical-align: baseline;"> comes in — your guided pathway to a secure cloud foundation and quick start on Google Cloud.</span></p> <p><span style="vertical-align: baseline;">Google Cloud Setup helps you quickly implement Google Cloud's recommended best practices. Our goal is to provide a fast and easy path to deploying your workloads without unnecessary configuration effort. Think of it as your expert guide, walking you through the essential first steps so you can focus on what truly matters: rapidly deploying your innovative applications and services. To help you get started without financial barriers, all components and service integrations enabled during the setup process are free or include some level of no-cost access.</span></p></div> <div class="block-aside"><dl> <dt>aside_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;title&#x27;, &#x27;Try Google Cloud for free&#x27;), (&#x27;body&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea4030f1c0&gt;), (&#x27;btn_text&#x27;, &#x27;Get started for free&#x27;), (&#x27;href&#x27;, &#x27;https://console.cloud.google.com/freetrial?redirectPath=/welcome&#x27;), (&#x27;image&#x27;, None)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Choose the foundation that fits your needs</strong></h3> <p><span style="vertical-align: baseline;">We understand that every organization and project has unique requirements. That's why Cloud Setup offers three distinct guided flows to choose from:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Proof-of-concept:</strong><span style="vertical-align: baseline;"> Designed for users who want to set up a lightweight environment to explore Google Cloud and run initial tests or sandbox workloads. This flow focuses on the minimum configuration to get you started quickly.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Production:</strong><span style="vertical-align: baseline;"> This flow is recommended for supporting production-ready workloads with security and scalability in mind. It aligns with Google Cloud’s best practices and is tailored for administrators setting up basic foundational infrastructure for production workloads.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Enhanced security:</strong><span style="vertical-align: baseline;"> Designed for organizations, regions or workloads with advanced security and compliance requirements, this flow defaults to more advanced security controls and is designed to help you meet rigorous requirements. Even this advanced foundation sets you up with a perpetual free tier up to certain usage limits.</span></p> </li> </ul></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/image1_LQ4uQKn.max-1000x1000.png" alt="1"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Building blocks for a solid foundation</strong></h3> <p><span style="vertical-align: baseline;">Cloud Setup guides you through a series of onboarding steps, presenting defaults backed by</span><strong style="vertical-align: baseline;"> </strong><a href="https://cloud.google.com/security/best-practices"><strong style="text-decoration: underline; vertical-align: baseline;">Google Cloud best practices</strong></a><span style="vertical-align: baseline;">. Throughout the process, you'll also encounter key features designed to help protect your organization and prepare it for growth, including:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/kms/docs/kms-autokey"><strong style="text-decoration: underline; vertical-align: baseline;">Cloud KMS AutoKey</strong></a><strong style="vertical-align: baseline;">:</strong><span style="vertical-align: baseline;"> Automates the provisioning and assignment of customer-managed encryption keys (CMEK).</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/security/products/security-command-center"><strong style="text-decoration: underline; vertical-align: baseline;">Security Command Center</strong></a><strong style="vertical-align: baseline;">: </strong><span style="vertical-align: baseline;">Provides security posture management for Google Cloud deployments including automatic project scanning for security issues such as open ports and misconfigured access controls.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/docs/observability"><strong style="text-decoration: underline; vertical-align: baseline;">Centralized Logging and Monitoring</strong></a><strong style="vertical-align: baseline;">:</strong><span style="vertical-align: baseline;"> Enables you to easily set up infrastructure to monitor your system's health and performance from a central location — critical for audit logging compliance and visualizing metrics across projects.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/vpc/docs/shared-vpc"><strong style="text-decoration: underline; vertical-align: baseline;">Shared VPC Networks</strong></a><strong style="vertical-align: baseline;">: </strong><span style="vertical-align: baseline;">Allows you to establish a centralized network across multiple projects, enabling secure and efficient communication between your Google Cloud resources.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/hybrid-connectivity"><strong style="text-decoration: underline; vertical-align: baseline;">Hybrid Connectivity</strong></a><strong style="vertical-align: baseline;">:</strong><span style="vertical-align: baseline;"> Facilitates connecting your Google Cloud environment to your on-premises infrastructure or other cloud providers. This is often a critical step for workload migrations.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/support"><strong style="text-decoration: underline; vertical-align: baseline;">Support plan</strong></a><strong style="vertical-align: baseline;">:</strong><span style="vertical-align: baseline;"> Enables you to quickly resolve any issues with help from experts at Google Cloud.</span></p> </li> </ul> <p><span style="vertical-align: baseline;">At the end of the guided flow, you can deploy your configuration directly via the Google Cloud console or download a </span><a href="https://cloud.google.com/docs/enterprise/deploy-foundation-using-terraform-from-console"><span style="text-decoration: underline; vertical-align: baseline;">Terraform configuration file</span></a><span style="vertical-align: baseline;"> for later deployment using other Infrastructure as Code (IaC) methods.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/2_RwqPvpA.gif" alt="2"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Experience the cloud faster and smarter</strong></h3> <p><span style="vertical-align: baseline;">Organizations using Cloud Setup experience enjoy:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Faster application deployment: </strong><span style="vertical-align: baseline;">By simplifying the initial setup, you can get your applications up and running more quickly, accelerating your cloud journey.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Reduced setup effort:</strong><span style="vertical-align: baseline;"> Our streamlined flow significantly reduces the number of manual steps, allowing you to establish a basic foundation with less effort.</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">Greater access to Google Cloud's full potential: </strong><span style="vertical-align: baseline;">By establishing a solid foundation quickly, you can more easily explore and leverage a wider range of Google Cloud services to meet your evolving needs and unlock greater value.</span></p> </li> </ul> <p><span style="vertical-align: baseline;">Ready to start your Google Cloud journey? Visit Google Cloud Setup today for a streamlined path to a secure cloud foundation. Let us guide you through the initial steps so you can focus on innovation and growth.</span></p> <p><span style="vertical-align: baseline;">To learn more, visit:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://cloud.google.com/docs/enterprise/setup-checklist"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Setup documentation</span></a></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><a href="https://console.cloud.google.com/cloud-setup/overview" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Setup overview</span></a><span style="vertical-align: baseline;"> (requires login)</span></p> </li> </ul></div>
  64. Product Manager

    Fri, 18 Jul 2025 16:00:00 -0000

    <div class="block-paragraph_advanced"><p style="text-align: justify;"><span style="vertical-align: baseline;">As developers and operators, you know that having access to the right information in the proper context is crucial for effective troubleshooting. This is why organizations invest a lot upfront curating monitoring resources across different business units: so information is easy to find and contextualize when needed.</span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">Today we are reducing the need for this upfront investment with an out-of-the-box </span><strong style="vertical-align: baseline;">Application Monitoring</strong><span style="vertical-align: baseline;"> experience for your organization on Google Cloud within </span><a href="https://cloud.google.com/stackdriver/docs"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Observability</span></a><span style="vertical-align: baseline;">. </span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">Application Monitoring consists of a set of pre-curated dashboards with relevant metrics and logs mapped to a user-defined application in </span><a href="https://cloud.google.com/products/app-hub"><span style="text-decoration: underline; vertical-align: baseline;">App Hub</span></a><span style="vertical-align: baseline;">. It incorporates best practices pioneered by Google Site Reliability Engineers (SRE) to optimize manual troubleshooting and unlock AI-assisted troubleshooting.</span></p> <p><span style="vertical-align: baseline;">Application Monitoring automatically labels and brings together key telemetry for your application into a centralized experience, making it easy to discover, filter and correlate trends. It also feeds application context into </span><a href="https://cloud.google.com/gemini/docs/cloud-assist/investigations"><span style="text-decoration: underline; vertical-align: baseline;">Gemini Cloud Assist Investigations</span></a><span style="vertical-align: baseline;">, for AI-assisted troubleshooting. </span></p></div> <div class="block-aside"><dl> <dt>aside_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;title&#x27;, &#x27;Try Google Cloud for free&#x27;), (&#x27;body&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea40fa5160&gt;), (&#x27;btn_text&#x27;, &#x27;Get started for free&#x27;), (&#x27;href&#x27;, &#x27;https://console.cloud.google.com/freetrial?redirectPath=/welcome&#x27;), (&#x27;image&#x27;, None)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">1. Application, service and workload dashboards </span></h3> <p style="text-align: justify;"><strong style="font-style: italic; vertical-align: baseline;">No more spending hours configuring application dashboards. </strong></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">From the moment you </span><a href="https://cloud.google.com/app-hub/docs/set-up-app-hub-folder"><span style="text-decoration: underline; vertical-align: baseline;">describe your application in App Hub</span></a><span style="vertical-align: baseline;">, Application Monitoring starts to automatically build dashboards tailored to your environment. Each dashboard comprises relevant telemetry for your application and is searchable, filterable and ready for deep dives — no configuration required. </span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">The dashboards offer an overview of charts detailing the </span><a href="https://sre.google/sre-book/monitoring-distributed-systems/#xref_monitoring_golden-signals" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">SRE Four Golden Signals</span></a><span style="vertical-align: baseline;">: traffic, latency, error rate, and saturation. This provides a high-level view of application performance, integrating automatically collected system metrics across various services and workloads such as load balancers, Cloud Run, GKE workloads, MIGs, and databases. From this overview, you can then drill down into services or workloads with performance issues or active alerts to access detailed metrics and logs.</span></p> <p><span style="vertical-align: baseline;">For example in the image below, a user defined an App Hub application called </span><span style="font-style: italic; vertical-align: baseline;">Cymbal BnB app</span><span style="vertical-align: baseline;">, with multiple services and workloads. The flow below shows the automatically generated experience with golden signals, alerts and relevant logs.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/1_zgV6J6C.gif" alt="1"> </a> <figcaption class="article-image__caption "><p data-block-key="g1e0b">Figure 1 - A user’s flow from an App Hub defined application (i.e. Cymbal BnB) to the automatic prebuilt Application Monitoring experience in Cloud Observability</p></figcaption> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3 role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">2. Labels and context propagation </span></h3> <p style="text-align: justify;"><strong style="font-style: italic; vertical-align: baseline;">See application labels propagated seamlessly across Google Cloud </strong></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">Once Application Monitoring is enabled, your application labels are propagated across Google Cloud, so you can see and use them to filter and focus on the most essential signals across the logs, metrics and trace explorers.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/2_yj24vCu.max-1000x1000.png" alt="2"> </a> <figcaption class="article-image__caption "><p data-block-key="g1e0b">Figure 2 - Logs Explorer showing application automatically tagged with application labels</p></figcaption> </figure> </div> </div> </div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/3_kukVdIB.max-1000x1000.png" alt="3"> </a> <figcaption class="article-image__caption "><p data-block-key="g1e0b">Figure 3 - Metrics Explorer showing application labels automatically associated with metrics</p></figcaption> </figure> </div> </div> </div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/4_BGEDIwf.max-1000x1000.png" alt="4"> </a> <figcaption class="article-image__caption "><p data-block-key="g1e0b">Figure 4 - Trace Explorer showing AppHub label Integration</p></figcaption> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">3. Gemini Cloud Assist Investigations</span></h3> <p style="text-align: justify;"><strong style="font-style: italic; vertical-align: baseline;">Troubleshoot issues faster with AI powered Investigations. </strong></p> <p><a href="https://cloud.google.com/gemini/docs/cloud-assist/investigations"><span style="text-decoration: underline; vertical-align: baseline;">Gemini Cloud Assist’s investigation feature</span></a><span style="vertical-align: baseline;"> makes it easier to troubleshoot issues because application boundaries and relationships have been propagated into the AI model, grounding it in context about your environment.  </span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/5_O7Wiid5.gif" alt="5"> </a> <figcaption class="article-image__caption "><p data-block-key="g1e0b">Figure 5 - Seamless entry point into Gemini Cloud Assist powered Investigations from application logs</p></figcaption> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p style="text-align: justify;"><span style="vertical-align: baseline;">Note - Gemini Cloud Assist Investigations is currently in private preview</span></p> <h3><span style="vertical-align: baseline;">Try Application Monitoring today</span></h3> <p style="text-align: justify;"><span style="vertical-align: baseline;">The new</span><span style="vertical-align: baseline;"> Application Monitoring experience provides a low-effort unified view of application and infrastructure performance for your troubleshooting needs.</span></p> <p style="text-align: justify;"><span style="vertical-align: baseline;">Take advantage of the new Google Cloud Application Monitoring experience by:</span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">Visiting your Cloud console</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation" style="text-align: justify;"><a href="https://cloud.google.com/app-hub/docs/set-up-app-hub-folder"><span style="text-decoration: underline; vertical-align: baseline;">Setting up </span><strong style="text-decoration: underline; vertical-align: baseline;">Applications</strong><span style="text-decoration: underline; vertical-align: baseline;"> in AppHub</span></a></p> </li> <ol> <li aria-level="2" style="list-style-type: lower-alpha; vertical-align: baseline;"> <p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">Adding </span><strong style="vertical-align: baseline;">Services</strong><span style="vertical-align: baseline;"> and </span><strong style="vertical-align: baseline;">Workloads</strong><span style="vertical-align: baseline;"> to your Application</span></p> </li> </ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">Navigating to </span><strong style="vertical-align: baseline;">Application Monitoring</strong><span style="vertical-align: baseline;"> in Cloud Observability to see your automatically built experience</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">Enable your Gemini Cloud Assist SKU and </span><a href="https://cloud.google.com/earlyaccess/gemini-cloud-assist?e=48754805&amp;hl=en"><span style="text-decoration: underline; vertical-align: baseline;">sign up for the trusted tester program</span></a><span style="vertical-align: baseline;"> to get access to the</span><strong style="vertical-align: baseline;"> Investigations experience</strong></p> </li> </ol> <h3 style="text-align: justify;"><span style="vertical-align: baseline;">Related docs</span></h3> <ol style="list-style-type: lower-alpha;"> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">Application Monitoring </span><a href="https://cloud.google.com/stackdriver/docs/observability/about-application-monitoring"><span style="text-decoration: underline; vertical-align: baseline;">docs</span></a></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">AppHub </span><a href="https://cloud.google.com/app-hub/docs/set-up-app-hub"><span style="text-decoration: underline; vertical-align: baseline;">docs</span></a></p> <ol style="list-style-type: lower-alpha;"> <li role="presentation" style="text-align: justify;"><span style="vertical-align: baseline;">Apphub </span><a href="https://cloud.google.com/app-hub/docs/supported-resources" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;"><span style="text-decoration: underline; vertical-align: baseline;">coverage docs</span></a></li> </ol> </li> </ol></div>
  65. Director of Engineering, Google Cloud

    Thu, 10 Jul 2025 09:30:00 -0000

    <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">At Google Cloud, we are committed to making it as seamless as possible for you to build and deploy the next generation of AI and agentic applications. Today, we’re thrilled to announce that we are </span><a href="https://docker.com/blog/build-ai-agents-with-docker-compose/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">collaborating with Docker</span></a><span style="vertical-align: baseline;"> to drastically simplify your deployment workflows, enabling you to bring your sophisticated AI applications from local development to </span><a href="https://cloud.google.com/run"><span style="text-decoration: underline; vertical-align: baseline;">Cloud Run</span></a><span style="vertical-align: baseline;"> with ease. </span></p> <h3><strong style="vertical-align: baseline;">Deploy your compose.yaml directly to Cloud Run</strong></h3> <p><span style="vertical-align: baseline;">Previously, bridging the gap between your development environment and managed platforms like Cloud Run required you to manually translate and configure your infrastructure. Agentic applications that use MCP servers and self-hosted models added additional complexity. </span></p> <p><span style="vertical-align: baseline;">The open-source </span><a href="http://compose-spec.io" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Compose Specification</span></a><span style="vertical-align: baseline;"> is one of the most popular ways for developers to iterate on complex applications in their local environment, and is the basis of Docker Compose. And now, </span><strong style="vertical-align: baseline;">gcloud run compose up</strong><span style="vertical-align: baseline;"> brings the simplicity of Docker Compose to Cloud Run, automating this entire process. Now in </span><a href="https://forms.gle/XDHCkbGPWWcjx9mk9" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">private preview</span></a><span style="vertical-align: baseline;">, you can deploy your existing</span><code style="vertical-align: baseline;"> compose.yaml</code><span style="vertical-align: baseline;"> file to Cloud Run with a single command, including building containers from source and leveraging Cloud Run’s volume mounts for data persistence.  </span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/original_images/compose.gif" alt="compose"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Supporting the Compose Specification with Cloud Run makes for easy transitions across your local and cloud deployments, where you can keep the same configuration format, ensuring consistency and accelerating your dev cycle.</span></p> <p style="padding-left: 40px;"><span style="font-style: italic; vertical-align: baseline;">“We’ve recently evolved Docker Compose to support agentic applications, and we’re excited to see that innovation extend to Google Cloud Run with support for GPU-backed execution. Using Docker and Cloud Run, developers can now iterate locally and deploy intelligent agents to production at scale with a single command. It’s a major step forward in making AI-native development accessible and composable. We’re looking forward to continuing our close collaboration with Google Cloud to simplify how developers build and run the next generation of intelligent applications.” - </span><span style="vertical-align: baseline;">Tushar Jain, EVP Engineering and Product, Docker</span></p> <h3><strong style="vertical-align: baseline;">Cloud Run, your home for AI applications</strong></h3> <p><span style="vertical-align: baseline;">Support for the compose spec isn’t the only AI-friendly innovation you’ll find in Cloud Run. We recently announced </span><a href="https://cloud.google.com/blog/products/serverless/cloud-run-gpus-are-now-generally-available"><span style="text-decoration: underline; vertical-align: baseline;">general availability of Cloud Run GPUs</span></a><span style="vertical-align: baseline;">, removing a significant barrier to entry for developers who want access to GPUs for AI workloads. With its pay-per-second billing, scale to zero, and rapid scaling (which takes approximately 19 seconds for a gemma3:4b model for time-to-first-token), Cloud Run is a great hosting solution for deploying and serving LLMs. </span></p> <p><span style="vertical-align: baseline;">This also makes Cloud Run a strong solution for Docker’s recently </span><a href="https://www.docker.com/blog/docker-mcp-gateway-secure-infrastructure-for-agentic-ai/" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">announced</span></a><span style="vertical-align: baseline;"> OSS MCP Gateway and Model Runner, making it easy for developers to take the AI applications locally to production in the cloud seamlessly. By supporting Docker’s recent addition of </span><a href="https://github.com/compose-spec/compose-spec/blob/main/spec.md#models" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">‘models’ to the open Compose Spec</span></a><span style="vertical-align: baseline;">, you can deploy these complex solutions to the cloud with a single command.  </span></p> <h3><strong style="vertical-align: baseline;">Bringing it all together</strong></h3> <p><span style="vertical-align: baseline;">Let's review the compose file for the above demo. It consists of a multi-container application (defined in </span><code style="vertical-align: baseline;">services</code><span style="vertical-align: baseline;">) built from sources and leveraging a storage volume (defined in </span><code style="vertical-align: baseline;">volumes</code><span style="vertical-align: baseline;">). It also uses the new </span><code style="vertical-align: baseline;">models</code><span style="vertical-align: baseline;"> attribute to define AI models and a Cloud Run-extension defining the runtime image to use:</span></p></div> <div class="block-code"><dl> <dt>code_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;code&#x27;, &#x27;name: agent\r\nservices:\r\n webapp:\r\n build: .\r\n ports:\r\n - &quot;8080:8080&quot;\r\n volumes:\r\n - web_images:/assets/images\r\n depends_on:\r\n - adk\r\n\r\n adk:\r\n image: us-central1-docker.pkg.dev/jmahood-demo/adk:latest\r\n ports:\r\n - &quot;3000:3000&quot;\r\n models:\r\n - ai-model\r\n\r\nmodels:\r\n ai-model:\r\n model: ai/gemma3-qat:4B-Q4_K_M\r\n x-google-cloudrun:\r\n inference-endpoint: docker/model-runner:latest-cuda12.2.2\r\n\r\nvolumes:\r\n web_images:&#x27;), (&#x27;language&#x27;, &#x27;&#x27;), (&#x27;caption&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea400ea1f0&gt;)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Building the future of AI</strong></h3> <p><span style="vertical-align: baseline;">We’re committed to offering developers maximum flexibility and choice by adopting open standards and supporting various agent frameworks.</span><strong style="vertical-align: baseline;"> </strong><span style="vertical-align: baseline;">This collaboration on Cloud Run and Docker is another example of how we aim to simplify the process for developers to build and deploy intelligent applications. </span></p> <p><span style="vertical-align: baseline;">Compose Specification support is available for our trusted users — </span><a href="https://forms.gle/XDHCkbGPWWcjx9mk9" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">sign up here for the private preview</span></a><span style="vertical-align: baseline;">. </span></p></div>
  66. Principal Platform Engineer, John Lewis Partnership

    Thu, 26 Jun 2025 16:00:00 -0000

    <div class="block-paragraph_advanced"><p><strong style="font-style: italic; vertical-align: baseline;">Editor's note:</strong><span style="font-style: italic; vertical-align: baseline;"> This is part one of the story. After you’re finished reading, head over to </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-two"><span style="font-style: italic; text-decoration: underline; vertical-align: baseline;">part two</span></a><span style="font-style: italic; vertical-align: baseline;">. </span></p> <hr/> <p><span style="vertical-align: baseline;">In 2017, John Lewis, a major UK retailer with a £2.5bn annual online turnover, was hampered by its monolithic e-commerce platform. This outdated approach led to significant cross-team dependencies, cumbersome and infrequent releases (monthly at best), and excessive manual testing, all further hindered by complex on-premises infrastructure. What was needed were some bold decisions to drive a quick and significant transformation.</span></p> <p><span style="vertical-align: baseline;">The John Lewis engineers knew there was a better way. Working with Google Cloud, they modernized their e-commerce operations with </span><a href="https://cloud.google.com/kubernetes-engine"><span style="text-decoration: underline; vertical-align: baseline;">Google Kubernetes Engine</span></a><span style="vertical-align: baseline;">. They started with the frontend, and started to see results fast: the frontend was moved onto Google Cloud in mere months, releases to the frontend browser journey started to happen weekly, and the business gladly backed expansion into other areas.</span></p> <p><span style="vertical-align: baseline;">At the same time, the team had a broader strategy in mind: to take </span><a href="https://cloud.google.com/solutions/platform-engineering"><span style="text-decoration: underline; vertical-align: baseline;">a platform engineering approach</span></a><span style="vertical-align: baseline;">, creating many product teams who built their own microservices to replace the functionality of the legacy commerce engine, as well as creating brand new experiences for customers. </span></p> <p><span style="vertical-align: baseline;">And so The John Lewis Digital Platform was born. The vision was to empower development teams and arm them with the tools and processes they needed to go to market fast, with full ownership of their own business services. The team’s motto? "You Build It. You Run It. You Own It." This decentralization of development and operational responsibilities would also enable the team to scale. </span></p> <p><span style="vertical-align: baseline;">This article features insights from Principal Platform Engineer Alex Moss, who delves into their strategy, platform build, and key learnings of John Lewis’ journey to modernize and streamline its operations with platform engineering — so you can begin to think about how you might apply platform engineering to your own organization.</span></p></div> <div class="block-aside"><dl> <dt>aside_block</dt> <dd>&lt;ListValue: [StructValue([(&#x27;title&#x27;, &#x27;Try Google Cloud for free&#x27;), (&#x27;body&#x27;, &lt;wagtail.rich_text.RichText object at 0x7fea3bec8370&gt;), (&#x27;btn_text&#x27;, &#x27;Get started for free&#x27;), (&#x27;href&#x27;, &#x27;https://console.cloud.google.com/freetrial?redirectPath=/welcome&#x27;), (&#x27;image&#x27;, None)])]&gt;</dd> </dl></div> <div class="block-paragraph_advanced"><h3><strong style="vertical-align: baseline;">Step 1: From monolithic to multi-tenant</strong></h3> <p><span style="vertical-align: baseline;">In order to make this happen, John Lewis needed to adopt a multi-tenant architecture — one tenant for each business service, allowing each owning team to work independently without risk to others -- and thereby permitting the Platform team to give the team a greater degree of freedom.</span></p> <p><span style="vertical-align: baseline;">Knowing that the business' primary objective was to greatly increase the number of product teams helped inform our initial design thinking, positioning ourselves to enable many independent teams even though we only had a handful of tenants. </span></p> <p><span style="vertical-align: baseline;">This foundational design has served us very well and is largely unchanged now, seven years later. Central to the multi-tenant concept is what we chose to term a "Service" — a logical business application, usually composed of several microservices plus components for storing data.</span></p></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/article1-image1.max-1000x1000.png" alt="article1-image1"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">We largely position our platform as a “bring your own container” experience, but encourage teams to make use of other Google Cloud services — particularly for handling state. Adopting services like Firestore and Pub/Sub reduces the complexity that our platform team has to work with, particularly for areas like resilience and disaster recovery. We also favor Kubernetes over compute products like Cloud Run because it strikes the right balance for us between enabling development teams to have freedom whilst allowing our platform to drive certain certain behaviours, e.g., the right level of guardrails, without introducing too much friction.</span></p> <p><span style="vertical-align: baseline;">On our platform, Product Teams (i.e., tenants) have a large amount of control over their own Namespaces and Projects. This allows them to prototype, build, and ultimately operate, their workloads without dependency on others — a crucial element of enabling scale. </span></p> <p><span style="vertical-align: baseline;">Our early-adopter teams were extremely helpful in helping evolve the platform; they were accepting of the lack of features and willing to develop their own solutions, and provided very rich feedback on whether we were building something that met their needs.</span></p> <p><span style="vertical-align: baseline;">The first tenant to adopt the platform was rebuilding the </span><a href="http://johnlewis.com" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">johnlewis.com</span></a><span style="vertical-align: baseline;">, search capability, replacing a commercial-off-the-shelf solution. This team was staffed with experienced engineers familiar with modern software development and the advantages of a microservice-based architecture. They quickly identified the need for supporting services for their application to store data and asynchronously communicate between their components. They worked with the Platform Team to identify options, and were onboard with our desire to lean into Google Cloud native services to avoid running our own databases or messaging. This led to us adopting Cloud Datastore and Pub/Sub for our first features that extended beyond Google Kubernetes Engine.</span></p> <h3><strong style="vertical-align: baseline;">All roads lead to success</strong></h3> <p><span style="vertical-align: baseline;">A risk with a platform that allows very high team autonomy is that it can turn into a bit of a wild-west of technology choices and implementation patterns. To handle this, but to do so in a way that remained developer-centric, we adopted the concept of a </span><strong style="vertical-align: baseline;">paved road, </strong><span style="vertical-align: baseline;"> analogous to a “golden path.” </span></p> <p><span style="vertical-align: baseline;">We found that the paved road approach made it easier to:</span></p> <ul> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">build useful platform features to help developers do things rapidly and safely</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">share approaches and techniques, and engineers to move between teams</span></p> </li> <li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"> <p role="presentation"><span style="vertical-align: baseline;">demonstrate to the wider organisation that teams are following required practices (which we do by building assurance capabilities, </span><strong style="vertical-align: baseline;">not </strong><span style="vertical-align: baseline;">by gating release)</span></p> </li> </ul> <p><span style="vertical-align: baseline;">The concept of the paved road permeates most of what the platform builds, and has inspired other areas of the John Lewis Partnership beyond the John Lewis Digital space.</span></p> <p><span style="vertical-align: baseline;">Our paved road is powered by two key features to enable simplification for teams:</span></p> <ol> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">The Paved Road Pipeline</strong><span style="vertical-align: baseline;">. This operates on the whole Service and drives capabilities such as Google Cloud resource provisioning and observability tools.</span></p> </li> <li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"> <p role="presentation"><strong style="vertical-align: baseline;">The Microservice CRD</strong><span style="vertical-align: baseline;">. As the name implies, this is an abstraction at the microservice level. The majority of the benefit here is in making it easier for teams to work with Kubernetes.</span></p> </li> </ol> <p><span style="vertical-align: baseline;">Whilst both features were created with the developer experience in mind, we discovered that they also hold a number of benefits for the platform team too.</span></p> <p><span style="vertical-align: baseline;">The Paved Road Pipeline is driven by a configuration file — in yaml (of course!) — which we call the Service Definition. This allows </span><strong style="vertical-align: baseline;">the team that owns the tenancy</strong><span style="vertical-align: baseline;"> to describe, through easy-to-reason-about configuration, what they would like the platform to provide for them. Supporting documentation and examples help them understand what can be achieved. Pushes to this file then drive a CI/CD pipeline for a number of platform-owned jobs, which we refer to as provisioners. These provisioners are microservices-like themselves in that they are independently releasable and generally focus on performing one task well. Here are some examples of our provisioners and what they can do:</span></p> <ul> <li role="presentation"><span style="vertical-align: baseline;">Create Google Cloud resources in a tenant’s Project. For example, </span><a href="https://cloud.google.com/storage/docs/creating-buckets"><span style="text-decoration: underline; vertical-align: baseline;">Buckets</span></a><span style="vertical-align: baseline;">, </span><a href="https://cloud.google.com/pubsub/docs/overview"><span style="text-decoration: underline; vertical-align: baseline;">PubSub</span></a><span style="vertical-align: baseline;">, and </span><a href="https://firebase.google.com/docs/firestore" rel="noopener" target="_blank"><span style="text-decoration: underline; vertical-align: baseline;">Firestore</span></a><span style="vertical-align: baseline;"> — amongst many others</span></li> <li role="presentation"><span style="vertical-align: baseline;">Configure platform-provided dashboards and custom dashboards based on golden-signal and self-instrumented metrics</span></li> <li role="presentation"><span style="vertical-align: baseline;">Tune alert configurations for a given microservice’s SLOs, and the incident response behaviour for those alerts</span></li> </ul></div> <div class="block-image_full_width"> <div class="article-module h-c-page"> <div class="h-c-grid"> <figure class="article-image--large h-c-grid__col h-c-grid__col--6 h-c-grid__col--offset-3 " > <img src="https://storage.googleapis.com/gweb-cloudblog-publish/images/article1-image2.max-1000x1000.png" alt="article1-image2"> </a> </figure> </div> </div> </div> <div class="block-paragraph_advanced"><p><span style="vertical-align: baseline;">Our product teams are therefore freed from the need to familiarize themselves deeply with how Google Cloud resource provisioning works, or Infrastructure-as-Code (IaC) tooling for that matter. Our preferred technologies and good practices can be curated by our experts, and developers can focus on building differentiating software for the business, while remaining fully in control of what is provisioned and when.</span></p> <p><span style="vertical-align: baseline;">Earlier, we mentioned that this approach has the added benefit of being something that the platform team can rely upon to build their own features. The configuration updated by teams for their Service can be combined with metadata about their team and surfaced via an API and events published to Pub/Sub. This can then drive updates to other features like incident response and security tooling, pre-provision documentation repositories, and more. This is an example of how something that was originally intended as a means to help teams avoid writing their own IaC can also be used to make it easier for us to build platform features, further improving the value-add — without the developer even needing to be aware of it!</span></p> <p><span style="vertical-align: baseline;">We think this approach is also more scalable than providing pre-built Terraform modules for teams to use. That approach still burdens teams with being familiar with Terraform, and versioning and dependency complexities can create maintenance headaches for platform engineers. Instead, we provide an easy-to-reason-about API and </span><strong style="vertical-align: baseline;">deliberately burden the platform team,</strong><span style="vertical-align: baseline;"> ensuring that the Service provides all the functionality our tenants require. This abstraction also means we can make significant refactoring choices if we need to.</span></p> <p><span style="vertical-align: baseline;">Adopting this approach also results in a broad consistency in technologies across our platform. For example, why would a team implement Kafka when the platform makes creating resources in Pub/Sub so easy? When you consider that this spans not just the runtime components that assemble into a working business service, but also all the ancillary needs for operating that software — resilience engineering, monitoring &amp; alerting, incident response, security tooling, service management, and so on—  this has a massive amplifying effect on our engineers’ productivity. All of these areas have full paved road capabilities on the John Lewis Digital Platform, reducing the cognitive load for teams in recognizing the need for, identifying appropriate options, and then implementing technology or processes to use them.</span></p> <p><span style="vertical-align: baseline;">That being said, one of the reasons we particularly like the paved road concept is because it doesn't preclude teams choosing to "go off-road." A paved road shouldn’t be mandatory, but it should be compelling to use, so that engineers aren’t tempted to do something else. Preventing use of other approaches risks stifling innovation and the temptation to think the features you've built are "good enough." The paved road challenges our Platform Engineers to keep improving their product so that it continues to meet our Developers' changing needs. Likewise, development teams tempted to go off-road are put off by the increasing burden of replicating powerful platform features. </span></p> <p><span style="vertical-align: baseline;">The needs of our Engineers don’t remain fixed, and Google Cloud are of course releasing new capabilities all the time, so we have extended the analogy to include a “dusty path” representing brand new platform features that aren’t as feature-rich as we’d like (perhaps they lack self-service provisioning or out-the-box observability). Teams are trusted to try different options and make use of Google Cloud products that we haven't yet paved. The Paved Road Pipeline allows for this experimentation - what we term "snowflaking". We then have an unofficial "rule of three", whereby if we notice at least 3 teams requesting the same feature, we move to make the use of it self-service.</span></p> <p><span style="vertical-align: baseline;">At the other end of the scale, teams can go completely solo — which we refer to as “crazy paving” — and might be needed to support wild experimentation or to accommodate a workload which cannot comply with the platform’s expectations for safe operation. Solutions in this space are generally not long-lived.</span></p> <p><span style="vertical-align: baseline;">In this article, we've covered how John Lewis revolutionized its e-commerce operations by adopting a multi-tenant, "paved road" approach to platform engineering. We explored how this strategy empowered development teams and streamlined their ability to provision Google Cloud resources and deploy operational and security features.</span></p> <p><span><span style="vertical-align: baseline;">In </span><a href="https://cloud.google.com/blog/products/application-development/simplifying-platform-engineering-at-john-lewis-part-two?e=48754805"><span style="text-decoration: underline; vertical-align: baseline;">part 2</span></a><span style="vertical-align: baseline;"> of this series, we'll dive deeper into how John Lewis further simplified the developer experience by introducing the Microservice CRD. You'll discover how this custom Kubernetes abstraction significantly reduced the complexity of working with Kubernetes at the component level, leading to faster development cycles and enhanced operational efficiency.</span></span></p> <p><span style="vertical-align: baseline;">To learn more about shifting down with platform engineering on Google Cloud, you can find more information available </span><a href="https://cloud.google.com/solutions/platform-engineering"><span style="text-decoration: underline; vertical-align: baseline;">here</span></a><span style="vertical-align: baseline;">. To learn more about how Google Kubernetes Engine (GKE) empowers developers to effortlessly deploy, scale, and manage containerized applications with its fully managed, robust, and intelligent Kubernetes service, you can find more information </span><a href="https://cloud.google.com/kubernetes-engine"><span style="text-decoration: underline; vertical-align: baseline;">here</span></a><span style="vertical-align: baseline;">.</span></p></div>
  67. Ten Great DevOps Job Opportunities

    Mon, 03 Aug 2026 13:36:59 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305.jpg 770w, https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of [&#8230;]
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305.jpg 770w, https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/08/devops_jobs_report_770x3305-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p>DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience.</p> <p>Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers.</p> <p>Of course, the pool of available DevOps talent is still relatively constrained, so when one DevOps professional takes on a new role, it tends to create opportunities for others.</p> <p>The ten job postings shared this week are selected based on the company looking to hire, the vertical industry segment and naturally, the pay scale being offered.</p> <p>We&#8217;re also committed to providing additional insights into the state of the DevOps job market. In the meantime, for your consideration.</p> <p><strong>Dice</strong></p> <p>Booz Allen Hamilton<br /> McLean, VA<br /> <a href="https://www.dice.com/job-detail/8e33ac39-f9ff-4146-95e4-6c658c9b87c3">DevOps Engineer</a><br /> $77,600 to $176,000</p> <p>Alarm.com<br /> Centennial, CO<br /> <a href="https://www.dice.com/job-detail/02afb240-e5ed-48ea-941b-69c4e7184a12">DevOps Engineer</a><br /> $120,000 to $130,000</p> <p>HarbourVest Partners<br /> Boston, MA<br /> <a href="https://www.dice.com/job-detail/52bbd39a-6109-4d92-b5ba-120682474dd0">DevOps Engineer</a><br /> $135,000 to $145,000</p> <p>Auria Solutions USA, Inc<br /> Boulder, CO<br /> <a href="https://www.dice.com/job-detail/3a6b0ec8-7a27-4443-82cb-90a7c97b3f66">DevOps Engineer</a><br /> $140,000 to $160,000</p> <p>Visionist<br /> Columbia, MD<br /> <a href="https://www.dice.com/job-detail/1c55d8d1-40b1-4a1b-9292-86a0b1f33829">DevOps Engineer</a><br /> $170,000 to $240,000</p> <p><strong>Greenhouse</strong></p> <p>Amperesand<br /> San Francisco, CA<br /> <a href="https://job-boards.greenhouse.io/amperesand/jobs/4336766009">Software Engineer-DevOps</a><br /> $140,000 to $160,000</p> <p>Sphinx Defense<br /> Colorado Springs, CO<br /> <a href="https://job-boards.greenhouse.io/sphinxdefense/jobs/5375508008">DevOps Engineer</a><br /> $140,000 to $170,000</p> <p>Lila Sciences<br /> Cambridge, MA<br /> <a href="https://job-boards.greenhouse.io/lilasciences/jobs/4248032009">Staff/Principal DevOps Engineer, AI Inference</a><br /> $192,000 to $272,000</p> <p>Oddball<br /> Remote, US<br /> <a href="https://job-boards.greenhouse.io/oddball/jobs/7819473003">DevOps Engineer</a><br /> $125,000 to $160,000</p> <p>Red Cell Partners<br /> Remote, US<br /> <a href="https://job-boards.greenhouse.io/redcellpartners/jobs/5201224007">DevSecOps Project Lead (Sr DevSecOps Engineer)</a><br /> $175,000 to $215,000</p>
  68. Microsoft Confirms Copilot ‘Super App’ Is Coming This Year — and It’s About More Than Convenience

    Mon, 03 Aug 2026 11:14:16 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />Microsoft is combining Copilot Chat, Code, Cowork and Autopilots into one super app, raising new questions about agent governance, identity, licensing and security.
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/08/Microsoft_Copilot_Super_App_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p><span style="font-weight: 400;">Microsoft is finally admitting what many IT teams already knew: It has too many Copilots.</span></p> <p><span style="font-weight: 400;">CEO Satya Nadella confirmed on the company&#8217;s fiscal Q4 2026 earnings call, held July 29, that Microsoft is folding its scattered Copilot experiences into a single app. The move will merge chat, coding, the Cowork research tool, and Microsoft&#8217;s autonomous agents, called Autopilots, into one place, spanning both consumer and business use. &#8220;Copilot is evolving rapidly from chat to Cowork to Autopilots,&#8221; Nadella said. &#8220;This quarter, we are bringing these Copilot experiences together, including code, in one super app. This is a major step forward, and I look forward to sharing more soon.&#8221;</span></p> <p><span style="font-weight: 400;">That&#8217;s a real commitment, not a rumor. Nadella attached a timeframe, not a date. He named the four pieces going into the merged app but did not say whether it replaces Microsoft&#8217;s existing standalone Copilot apps or runs alongside them. Pricing, feature scope and rollout mechanics are all still unknown.</span></p> <h3><b>Why Microsoft is Doing This Now</b></h3> <p><span style="font-weight: 400;">The consolidation has been in motion for a while. Fortune first reported the plan in May, under the internal slogan &#8220;Delivering one Copilot.&#8221; Inside Microsoft, the project reportedly goes by &#8220;One Copilot,&#8221; with the goal of cutting down on app switching so Copilot feels the same whether someone is coding, managing documents, collaborating with colleagues, or handling personal tasks.</span></p> <p><span style="font-weight: 400;">The confusion Microsoft is trying to fix is real. The company has steadily expanded the Copilot brand across Windows, Microsoft 365, GitHub, Teams, Edge and several enterprise products. Today it runs two separate Copilot apps — Microsoft Copilot for consumers and Microsoft 365 Copilot for both consumers and enterprise users — with the latter having started life as the all-in-one Office app before its rebrand.</span></p> <p><span style="font-weight: 400;">There&#8217;s also a usage story behind the timing. Nadella said user conversations have nearly doubled year over year, and weekly engagement has reached levels comparable to products like Outlook and Teams. Microsoft now counts more than 30 million paid Microsoft 365 Copilot seats. A consolidated app is as much about capturing that momentum as it is about tidying up the product line.</span></p> <p><span style="font-weight: 400;">&#8220;Microsoft is claiming the agent control plane at the work surface,&#8221; said Mitch Ashley, VP and practice lead, software lifecycle engineering &amp; AI-native software engineering, at <a href="https://futurumgroup.com/" target="_blank" rel="noopener">The Futurum Group</a>. &#8220;Autopilots running inside one consumer and commercial app put identity governance on the critical path.&#8221;</span></p> <h3><b>Microsoft Isn&#8217;t Alone in Chasing the &#8220;Super App&#8221;</b></h3> <p><span style="font-weight: 400;">This is very much an industry moment, not a Microsoft-only move. OpenAI recently launched its own super app combining ChatGPT and its Codex coding tool, and OpenAI president Greg Brockman admitted in an interview that the rollout was &#8220;kind of a mess.&#8221; Users who wanted the familiar chat experience were confused by new Work and Codex tabs, with chat history somewhat buried; OpenAI later reworked the app to add separate Work and Chat tabs and moved Codex into a drop-down menu. That&#8217;s a useful cautionary tale for Microsoft as it plans its own merge.</span></p> <p><span style="font-weight: 400;">Microsoft isn&#8217;t alone in chasing this idea, and the &#8220;super app&#8221; has become the industry&#8217;s current obsession. The logic is straightforward: whoever gets users to open one app for chat, coding and delegated tasks controls the default interface for enterprise AI work. The race is no longer about building another AI assistant. It&#8217;s about becoming the place where users do everything with AI.</span></p> <h3><b>The Governance Question Nobody&#8217;s Answered Yet</b></h3> <p><span style="font-weight: 400;">For DevOps and platform teams, the interesting part isn&#8217;t the interface — it&#8217;s what a single app does to agent sprawl and identity management.</span></p> <p><span style="font-weight: 400;">Consolidating chat, coding assistance, and autonomous agents into one app doesn&#8217;t automatically solve the governance problem; it just changes where it shows up. Enterprises are already wrestling with what&#8217;s commonly called agent sprawl, where AI agents multiply gradually as organizations experiment without establishing governance frameworks, often accumulating over-privileged access with no clean way to revoke it when something goes wrong. Gartner has projected that 40% of enterprise applications will include task-specific AI agents by the end of 2026, up from under 5% in 2025.</span></p> <p><span style="font-weight: 400;">Microsoft has been building toward this problem on the identity side independently of the super app news. Microsoft Entra Agent ID is designed to apply identity governance across the full agent lifecycle, from creation through decommissioning, and its agent registry gives organizations a unified inventory of agents running across the organization, including non-Microsoft agents. That plumbing matters more once Autopilots sit inside a single app that spans consumer and commercial use — a single front door means a single, much larger set of credentials, permissions, and audit trails to keep straight.</span></p> <p><span style="font-weight: 400;">Ashley put the harder work in perspective: &#8220;Admins will still reconcile licensing, permission scopes, and audit trails across four products that grew up separately. Consolidating the interface is the easy half.&#8221;</span></p> <p><span style="font-weight: 400;">Security researchers who track this space put it plainly: most organizations fail to control agent sprawl because they treat agents as software instead of identity-bearing entities, when every agent that can access data or trigger actions needs to be governed like any other identity, with scoped permissions and continuous monitoring. A super app that bundles an autonomous agent framework raises the stakes on getting that right, since the surface area for a misconfigured or over-privileged agent grows the moment more employees start relying on Autopilots by default.</span></p> <h3><b>What to Watch</b></h3> <p><span style="font-weight: 400;">Nadella committed to a launch window of this quarter, which runs through the end of October. Until Microsoft shares more, the open questions for IT leaders are less about features and more about operations: how licensing and admin controls carry over from Microsoft 365 Copilot and GitHub Copilot, whether Autopilots ship with the same Entra Agent ID guardrails by default, and what happens to existing Copilot deployments once the merged app arrives.</span></p> <p><span style="font-weight: 400;">Microsoft has a chance to avoid OpenAI&#8217;s rocky rollout by learning from it in real time. Whether it does will say a lot about how seriously the company is treating governance, not just branding.</span></p>
  69. JetBrains Open-Sources KotlinLLM, a Research Prototype for Runtime Code Generation

    Mon, 03 Aug 2026 10:40:37 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL.jpg 770w, https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />JetBrains open-sources KotlinLLM, letting compiled Kotlin apps generate and persist LLM-written code at runtime instead of calling a model live.
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL.jpg 770w, https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/08/KotlinLLM_770x330_FINAL-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p><span style="font-weight: 400;">JetBrains has released KotlinLLM as open source, giving Kotlin/JVM developers a research prototype that lets applications generate their own logic at runtime — and then keep it as ordinary, reviewable source code.</span></p> <p><span style="font-weight: 400;">The tool comes from JetBrains Research, built by Anastasia Birillo and Stanislav Sandler, and it tackles a problem most teams have only half-solved so far: how do you let an LLM handle logic that&#8217;s too messy or too variable to hand-write, without turning your production app into something that depends on a live model call every time it runs?</span></p> <p><span style="font-weight: 400;">KotlinLLM is an IntelliJ IDEA plugin that adds what the team calls &#8220;Smart macros&#8221; — Kotlin function calls whose bodies are generated code. There are two of them in the public API right now. </span><span style="font-weight: 400;">asLlm&lt;F, T&gt;()</span><span style="font-weight: 400;"> takes unstructured or semi-structured input and converts it into a typed Kotlin value — a data class, an enum, a list, a primitive. </span><span style="font-weight: 400;">mockLlm&lt;T&gt;()</span><span style="font-weight: 400;"> generates a stateful implementation of an interface, so it behaves like a test double you didn&#8217;t have to write by hand.</span></p> <p><span style="font-weight: 400;">The call site looks like ordinary Kotlin. What&#8217;s different is what happens underneath. Instead of shipping out to a model every time the function runs, KotlinLLM generates real Kotlin source the first time it hits a new scenario, then reuses that code going forward. No further model call, no added latency, and reproducible output because it&#8217;s compiled code sitting in your repo.</span></p> <p><span style="font-weight: 400;">&#8220;A model call in the request path has no SLA,&#8221; said Mitch Ashley, VP and practice lead for software lifecycle engineering and AI-native software engineering at <a href="https://futurumgroup.com/" target="_blank" rel="noopener">The Futurum Group</a>. &#8220;Generating the code once and committing it puts that logic back under change control. Teams get a diff, a test, and a rollback path instead of a prompt they have to trust.&#8221;</span></p> <p><span style="font-weight: 400;">That distinction matters because most existing approaches to this problem have real tradeoffs. Calling an LLM directly on every request is slow and non-deterministic, and it makes your app dependent on an external service at runtime. Routing logic through an external agent workflow keeps that logic outside your codebase, where it&#8217;s harder to review or test. And most of the prior research in this space — projects like byLLM, nightjar, and Healer — was built for interpreted languages like Python. Kotlin, compiled and statically typed, hadn&#8217;t really been addressed the same way.</span></p> <p><span style="font-weight: 400;">JetBrains designed KotlinLLM around three properties: it&#8217;s explicit, so a reviewer can see a feature is LLM-backed just by reading the call site; it&#8217;s persistent, since generated behavior gets saved as source rather than living only in a runtime session; and it&#8217;s portable, meaning the generated code runs as plain Kotlin once the plugin isn&#8217;t in the loop anymore.</span></p> <p><span style="font-weight: 400;">Ashley pointed to that first property as the real payoff for teams already stretched thin on review capacity. &#8220;Self-evidencing code is how teams pay down verification debt,&#8221; he said. &#8220;A reviewer can see the call site is model-backed and read exactly what it produced. Anyone shipping AI-generated logic into production owes reviewers that much.&#8221;</span></p> <p><span style="font-weight: 400;">The team tested the approach on two projects. An adapted version of Spring Petclinic Kotlin used 18 </span><span style="font-weight: 400;">asLlm</span><span style="font-weight: 400;"> call sites and completed all 24 application scenarios after the Smart macros evolved, with a 100% hot-reload success rate. Compilation and redefinition added roughly 1% runtime overhead — a small enough tax to make the approach realistic for actual use. A second test, a synthetic tool called GitHub Beginner Issue Radar, parsed real issue data across 20 repositories — more than 30,000 issues — and reached about 0.89 recall against ground-truth beginner labels.</span></p> <p><span style="font-weight: 400;">This isn&#8217;t the first attempt at bringing LLMs into runtime logic. Research out of the University of Michigan on byLLM took a similar swing at the problem for Python, using a compiler that reads semantic intent from code and turns it into targeted prompts. That project has already seen over 14,000 downloads in a single month since going open source, which says something about how much appetite there is for this kind of tooling — developers want AI-generated logic they can actually own, not just call.</span></p> <p><span style="font-weight: 400;">The KotlinLLM repository is public now under the Apache License 2.0. It includes the IntelliJ plugin, the Smart macro API, and runnable example projects—including the committed generated source from both test cases —so anyone can see exactly what the LLM produced and run it as regular Kotlin. JetBrains also published the KotlinConf 2026 talk recording and a full technical write-up covering the design and evaluation.</span></p> <p><span style="font-weight: 400;">JetBrains is upfront that this is a research prototype, not a finished product, and they&#8217;re asking for exactly the kind of feedback that stage calls for: try it on a real Kotlin/JVM project, open issues when something breaks or behaves unexpectedly, and send pull requests with real use cases. The team specifically wants examples of where </span><span style="font-weight: 400;">asLlm</span><span style="font-weight: 400;"> and </span><span style="font-weight: 400;">mockLlm</span><span style="font-weight: 400;"> work well — or where they don&#8217;t.</span></p> <p><span style="font-weight: 400;">For teams already experimenting with agentic AI in their development pipelines, KotlinLLM is worth watching less for what it does today and more for the pattern it&#8217;s testing: LLM-generated logic that lives in your codebase like any other code, instead of behind an API call you have to trust every time.</span></p>
  70. GitHub Brings Stacked Pull Requests Out of the Shadows

    Mon, 03 Aug 2026 10:19:27 -0000

    <div><img width="770" height="329" src="https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205.jpg" class="attachment-large size-large wp-post-image" alt="AI coding, teams, vibecoding, shadow, vibecoding vibe, coding, GitHub, agents, Gemini, Canvas, Gemini, code, Augment Code, code, kernel compliance-as-code software secure software Terraform infrastructure" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205.jpg 770w, https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-290x124.jpg 290w, https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-360x154.jpg 360w, https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="AI coding, teams, vibecoding, shadow, vibecoding vibe, coding, GitHub, agents, Gemini, Canvas, Gemini, code, Augment Code, code, kernel compliance-as-code software secure software Terraform infrastructure" decoding="async" />GitHub introduces native stacked pull requests, helping development teams break large changes into smaller, dependency-ordered PRs that are faster and easier to review.
    <div><img width="770" height="329" src="https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205.jpg" class="attachment-large size-large wp-post-image" alt="AI coding, teams, vibecoding, shadow, vibecoding vibe, coding, GitHub, agents, Gemini, Canvas, Gemini, code, Augment Code, code, kernel compliance-as-code software secure software Terraform infrastructure" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205.jpg 770w, https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-290x124.jpg 290w, https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-360x154.jpg 360w, https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2022/02/coding-gb646cb77a_1280-e1644931732205-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="AI coding, teams, vibecoding, shadow, vibecoding vibe, coding, GitHub, agents, Gemini, Canvas, Gemini, code, Augment Code, code, kernel compliance-as-code software secure software Terraform infrastructure" decoding="async" /><p><span style="font-weight: 400;">For years, stacked pull requests have been something of an open secret in software engineering. Teams at Meta and Google have used internal versions of the workflow for over a decade, and open source developers cobbled together their own approach with tools like ghstack. Now GitHub is making it a native feature. The company announced this week that stacked pull requests are in public preview, rolling out to all repositories over the coming days.</span></p> <p><span style="font-weight: 400;">The idea behind stacking is simple, even if the mechanics take some getting used to. Instead of building one large pull request that captures an entire feature, developers break the work into an ordered series of smaller PRs. Each one sits on top of the last, representing a single layer of the change. A schema update might be the base layer, with business logic stacked on top of that, and a UI change stacked on top of that. Reviewers can look at each layer on its own, without wading through a diff that spans a thousand lines.</span></p> <p><span style="font-weight: 400;">That distinction matters more than it might seem. Research on code review patterns has consistently found that review quality drops as pull requests grow. One analysis of 1.5 million pull requests found that changes under 200 lines get approved roughly three times faster than larger ones, and carry about 40% fewer defects. Every additional 100 lines adds close to 25 minutes of review time, and once a PR passes the 1,000-line mark, the odds of catching real problems fall sharply. Reviewers simply run out of the mental bandwidth needed to do the job well.</span></p> <p><span style="font-weight: 400;">&#8220;Review capacity sets delivery pace on most teams,&#8221; said Mitch Ashley, VP and practice lead for software lifecycle engineering and AI-native software engineering at <a href="https://futurumgroup.com/" target="_blank" rel="noopener">The Futurum Group</a>. &#8220;Breaking that change into ordered layers lets a reviewer verify the schema before judging the logic built on top of it.&#8221;</span></p> <p><span style="font-weight: 400;">GitHub&#8217;s version of stacking works through a new CLI extension, </span><span style="font-weight: 400;">gh-stack</span><span style="font-weight: 400;">, along with support on github.com, the GitHub mobile app, and through coding agents like GitHub Copilot using a dedicated skill. Developers start with a branch and PR for the first change, then add branches and PRs on top of it, with each new PR targeting the layer beneath it. A stack map at the top of each pull request shows how that specific layer fits into the larger change, so reviewers get context without having to review the whole stack at once.</span></p> <p><span style="font-weight: 400;">The merge experience is where GitHub&#8217;s approach earns its keep. Merging the latest ready PR in a stack lands that change along with every unmerged layer underneath it, all in one operation. Teams can also merge partial stacks, landing lower layers while the PRs above them stay open, automatically rebasing and retargeting against the new base. Existing branch protections, required checks, and merge queues still apply throughout, since stacking is built into GitHub rather than layered on top of it as a separate tool.</span></p> <p><span style="font-weight: 400;">Early adopters are already describing the shift in how they work. Vercel&#8217;s Next.js team said stacked PRs helped them ship larger features while keeping individual changes small and easier to review. TED&#8217;s engineering team pointed to a more specific pressure: as AI coding tools have made developers more productive, the pull requests they generate have grown large enough to overwhelm reviewers. Stacking, in their telling, restores the balance by breaking that output into dependency-ordered chunks that are easier to verify, both faster and more accurately.</span></p> <p><span style="font-weight: 400;">That AI angle is worth sitting with. Coding agents are increasingly capable of producing entire features in one pass, and that output has to go somewhere. Without a mechanism for splitting it up, teams risk trading one bottleneck (writing code) for another (reviewing it). Stacked PRs give teams a way to turn agent-generated work into a series of bounded review units, such as a schema change followed by service logic followed by an interface update, so a reviewer can validate the foundation before signing off on what&#8217;s built on top of it. That only holds, though, when the work has a genuine dependency chain. Stacking unrelated changes just because multiple agents happened to produce them in parallel adds complexity without the benefit.</span></p> <p><span style="font-weight: 400;">&#8220;Verification debt is what makes small changes worth the extra branches,&#8221; Ashley said. &#8220;Teams measuring output by merged volume will keep hiring reviewers to chase machine-speed generation. Engineering leaders have to size work to what a reviewer can hold.&#8221;</span></p> <p><span style="font-weight: 400;">Merge queue support for stacked PRs is rolling out progressively over the coming weeks, which suggests GitHub is still smoothing out how the feature behaves under real-world CI load. Teams that have relied on third-party stacking tools, such as Graphite, will likely watch closely to see how much of that workflow GitHub absorbs natively and how much room remains for specialized tooling on top.</span></p> <p><span style="font-weight: 400;">What&#8217;s clear already is that GitHub is treating pull request size as a productivity and quality problem worth solving at the platform level, not just a workflow preference for individual teams. As AI tools generate more code faster, the way that code gets reviewed may end up mattering more than the way it gets written.</span></p>
  71. Open Source Code Just as Secure as Proprietary Software—If You Manage It Right, Says CISA

    Fri, 31 Jul 2026 21:18:29 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />Open source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures to secure it properly, according to a new guide published by the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The report, “Open Source Software: Security Principles and Practices,” provides with guidance to help agencies comply [&#8230;]
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/open_source_security_cisa_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p><span style="font-weight: 400;">Open source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures to secure it properly, according to a new guide published by the U.S. Cybersecurity and Infrastructure Security Agency (</span><a href="https://www.cisa.gov/about"><span style="font-weight: 400;">CISA</span></a><span style="font-weight: 400;">).</span></p> <p><span style="font-weight: 400;">The report, “</span><a href="https://www.cisa.gov/resources-tools/resources/open-source-software-security-principles-and-practices"><span style="font-weight: 400;">Open Source Software: Security Principles and Practices</span></a><span style="font-weight: 400;">,” provides with guidance to help agencies comply with two Presidential Executive Orders (</span><a href="https://www.federalregister.gov/documents/2025/01/17/2025-01470/strengthening-and-promoting-innovation-in-the-nations-cybersecurity"><span style="font-weight: 400;">14144</span></a><span style="font-weight: 400;"> and </span><a href="https://www.federalregister.gov/documents/2025/06/11/2025-10804/sustaining-select-efforts-to-strengthen-the-nations-cybersecurity-and-amending-executive-order-13694"><span style="font-weight: 400;">14306</span></a><span style="font-weight: 400;">) which both urged them to do a more thorough job securing the software they use, a response to recent exploits like Log4Shell and XZ utils. </span></p> <p><span style="font-weight: 400;">CISA acknowledges that open source can provide immeasurable benefits to government agencies, not merely because it is available without licensing fees, but also because agencies can extend the software to meet their own requirements. But at the same time, open source software must be managed differently than proprietary software.</span></p> <p><span style="font-weight: 400;">Malicious hackers (and increasingly AI agents) use vulnerabilities to gain entry and exploit systems. In the case of the vendor software, it is the vendor’s responsibility to provide timely updates should a software vulnerability be found, which agencies should apply as soon as possible.</span></p> <p>With open source software, however, agencies need to take a more proactive role in patching and understand the dependencies, or additional software components, that an open source package relies on. Those components also need to be secured, the guidance advises.</p> <p><span style="font-weight: 400;">The guidance describes established principles for patching. It also provides a framework to evaluate trustworthiness and risk tolerance of software packages, as well as a set of best practices to procure, deploy and maintain open source software.</span></p> <p><span style="font-weight: 400;">In practical terms, agencies wishing to use open source should establish a process that supports staff in choosing the software that meets the agency’s needs but minimizes risks to the agency. </span></p> <p><span style="font-weight: 400;">For instance, an agency’s Office of the Chief Information Officer may set up a system to pre-approve certain software libraries for use in the agency. Automated tools could help verify safe software packages, and reviews would consider potential risk exposure. The CIO could still individually sign off on higher-risk components, such as operating systems. </span></p> <p><span style="font-weight: 400;">To help agencies, CISA produced the C4 Framework, which can be used to assess the trustworthiness of a software package. It looks at four factors (the four Cs): </span></p> <ul> <li style="font-weight: 400;" aria-level="1"><b>Codebase</b><span style="font-weight: 400;">: Take a look at the actual source code and dependencies that make up the software component of interest. How recently was the last update committed? How many vulnerabilities have been found? How many out-of-date dependencies does it rely on? </span></li> <li style="font-weight: 400;" aria-level="1"><b>Community</b><span style="font-weight: 400;">: How robust is the community that maintains and contributes to the project? Is it part of a foundation, or managed by a private company?</span></li> <li style="font-weight: 400;" aria-level="1"><b>Conduct</b><span style="font-weight: 400;">: How is the project managed? Is there a vulnerability disclosure process? Do the project leaders follow their own code of conduct? </span></li> <li style="font-weight: 400;" aria-level="1"><b>Configuration</b><span style="font-weight: 400;">: Is the default configuration secure? Are there guides for use in highly-sensitive environments?</span></li> </ul> <p><span style="font-weight: 400;">Open source AI systems should go through additional checks, CISA recommends. Agents should get sufficient transparency into the training data, in addition to the software itself. “Only with transparency and access can agencies understand and study the software, analyze it for vulnerabilities, and remediate any found vulnerabilities or risks,” the guide recommends. </span></p> <p><span style="font-weight: 400;">CISA has targeted this report to U.S. federal agencies, though the advice here is rock-solid for use in the industrial sector as well. Many businesses in finance and health care, for instance, routinely follow government guidance. So if your organization uses open source in any capacity, this report may be worth checking out.</span></p>
  72. Why Log Monitoring Is the Missing Link in Most Incident Response Workflows

    Fri, 31 Jul 2026 17:31:34 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/LogMonitoring-e1785518875301.jpeg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/LogMonitoring-150x150.jpeg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />Modern engineering teams have invested heavily in observability. Dashboards are populated, alerts are configured, on-call rotations are set. Yet when production incidents occur, the average time to resolution hasn&#8217;t dropped nearly as fast as the tooling has improved. The reason, in many cases, comes down to one overlooked gap: logs aren&#8217;t being used the way [&#8230;]
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/LogMonitoring-e1785518875301.jpeg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/LogMonitoring-150x150.jpeg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p>Modern engineering teams have invested heavily in observability. Dashboards are populated, alerts are configured, on-call rotations are set. Yet when production incidents occur, the average time to resolution hasn&#8217;t dropped nearly as fast as the tooling has improved. The reason, in many cases, comes down to one overlooked gap: logs aren&#8217;t being used the way they should be during active incidents.</p> <p>This isn&#8217;t a tooling problem. Most organizations already have log data flowing somewhere. It&#8217;s a workflow problem, specifically, how logs integrate (or fail to integrate) into the broader incident response process.</p> <h3><strong>The Three-Tool Problem</strong></h3> <p>A typical incident response scenario looks something like this: an alert fires, the on-call engineer opens a metrics dashboard to understand the scope, then switches to a separate logging tool to investigate root cause, then jumps to a tracing tool to follow the request path. Three tools. Three contexts. Three sets of query syntax.</p> <p>By the time the engineer has assembled enough context to diagnose the issue, significant time has already elapsed, not because the data wasn&#8217;t there, but because it wasn&#8217;t connected. According to a <a href="https://arctiq.com/2025-cloud-observability-and-automation-trends-report?">2025 survey of IT and DevOps leaders</a>, nearly one-third of organizations use five or more observability tools, and two-thirds report it takes four or more hours to resolve production issues. The correlation isn&#8217;t coincidental.</p> <h3><strong>Logs as Narrative, Not Just Data</strong></h3> <p>The fundamental value of logs in incident response isn&#8217;t just diagnostic; it&#8217;s narrative. Metrics tell you that something is wrong. Traces tell you where in the system the failure is propagating. Logs tell you what actually happened, line by line, at the exact moment things broke. That narrative context is irreplaceable during high-pressure incident triage.</p> <p>The problem is that logs are often treated as a post-incident forensics tool rather than a real-time response asset. Teams pull logs after the fact to write postmortems, not during the incident to accelerate diagnosis. Flipping this pattern, making log data immediately accessible and correlated with other signals at the moment of detection, is one of the highest-leverage changes a team can make to their incident response workflow.</p> <h3><strong>What Effective Log Integration Actually Looks Like</strong></h3> <p>The shift from reactive to active log usage in incident response comes down to three practices.</p> <p>First, log correlation at the point of alerting. When an alert fires, the response interface should surface relevant log events automatically, not require the engineer to open a separate tool and construct a query from memory while under pressure. Correlated log context should be part of the alert payload itself.</p> <p>Second, structured logging as a standard, not an aspiration. Unstructured logs are difficult to query quickly under pressure. Teams that have invested in structured logging, consistent field names, log levels, service identifiers, and request IDs dramatically reduce the cognitive load on responding engineers. Searching for a specific request ID across services becomes a seconds-long operation rather than a minutes-long one.</p> <p>Third, the right tooling for the volume and velocity of log data your system generates. Choosing and configuring <a href="https://middleware.io/blog/log-monitoring-tools/">log monitoring tools</a> that can ingest, index, and surface logs in real time, rather than with a lag, is foundational. A logging platform that&#8217;s five minutes behind during a P1 incident is functionally useless for triage purposes.</p> <h3><strong>The On-Call Experience Is a Product Decision</strong></h3> <p>One underappreciated dimension of log monitoring in incident response is its impact on on-call engineer experience. Alert fatigue is a well-documented problem, but log fatigue, the experience of drowning in raw, unstructured, uncontextualized log data during an incident, is equally damaging and far less discussed.</p> <p>When logs are well-structured, correlated with metrics and traces, and surfaced at the right moment, on-call becomes a manageable cognitive task. When logs are siloed, noisy, and queryable only through a separate interface, on-call becomes an exhausting detective exercise that degrades both resolution speed and team morale. The investment in better log monitoring isn&#8217;t just an observability decision, it&#8217;s an organizational health decision.</p> <h3><strong>The OpenTelemetry Factor</strong></h3> <p>The growing adoption of OpenTelemetry is quietly reshaping how teams approach log integration. As OpenTelemetry&#8217;s logging specification matures, teams are gaining a standardized way to collect, enrich, and export logs alongside traces and metrics using a single, vendor-neutral instrumentation layer. This matters for incident response because it creates the technical foundation for true correlation, logs that carry the same trace IDs as distributed traces, enabling engineers to move seamlessly between signal types during triage.</p> <p>Teams that invest in OpenTelemetry-native instrumentation now are building an incident response capability that compounds in value over time as their systems grow more complex.</p> <h3><strong>Closing the Loop</strong></h3> <p>Incident response maturity is often measured by MTTR, mean time to resolution. But MTTR is a downstream metric. The upstream inputs that actually move it are time to detection, time to context, and time to diagnosis. Log monitoring, done well, directly compresses all three.</p> <p>The teams shipping the most reliable systems aren&#8217;t necessarily the ones with the most sophisticated alerting or the most granular metrics. They&#8217;re the ones who have made log data a first-class citizen in their incident response workflow, not a fallback resource for postmortems, but an active, correlated, real-time signal that shortens the gap between something breaking and someone understanding why.</p> <p>In a world where every minute of downtime carries a measurable cost, that gap is worth closing.</p>
  73. CISA’s 2026 SBOM Guidance Adds Hash Requirements and AI Coverage

    Fri, 31 Jul 2026 07:47:24 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />CISA’s updated 2026 SBOM minimum elements expand software transparency requirements to AI, SaaS and open source while adding hashes, licenses and stronger validation.
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/cisa_sbom_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p><span style="font-weight: 400;">CISA just gave software supply chain security a long-overdue refresh. Working with the NSA, the FBI, and a roster of international partners, the agency released the 2026 Minimum Elements for a Software Bill of Materials, updating and replacing the baseline that the National Telecommunications and Information Administration published back in 2021. Five years is a long time in software security terms, and the update shows.</span></p> <p><span style="font-weight: 400;">The timing isn&#8217;t random. The revision incorporates feedback from more than 90 comments submitted during a public comment period, and CISA circulated a draft in 2025 specifically to update elements like SBOM author, software producer, and component version for better clarity. This wasn&#8217;t a quiet policy tweak. It was a deliberate, multi-year rework built on real feedback from people who actually generate and consume SBOMs for a living.</span></p> <h3><b>What&#8217;s New</b></h3> <p><span style="font-weight: 400;">The headline change is scope. The minimum elements now apply to SBOMs across all software types, including open-source software, AI software, and software-as-a-service. That&#8217;s a meaningful expansion from 2021, when the guidance was written before AI systems and SaaS delivery models were the default rather than the exception.</span></p> <p><span style="font-weight: 400;">The second big change is data quality. According to one industry summary of the release, the guidance adds new required minimum data fields, including component hash algorithm, component license, SBOM tool name, and SBOM generation context. It also renames several existing elements for consistency, with &#8220;Supplier Name&#8221; becoming &#8220;Component Producer&#8221;.</span></p> <p><span style="font-weight: 400;">The hash requirement deserves its own paragraph, because it closes a real gap. A package identifier tells a scanner what a component is supposed to be. It doesn&#8217;t tell you what the component actually is. If someone swaps out the contents of a library while leaving the name and version untouched, the identifier looks fine, and the vulnerability scanner has no idea anything changed. A hash captures the actual bytes of the file. Requiring it in every SBOM means organizations finally get a way to verify that what&#8217;s documented matches what&#8217;s deployed, not just what&#8217;s claimed.</span></p> <p><span style="font-weight: 400;">CISA was careful to note that this is a floor, not a ceiling. While the minimum elements apply to all software, certain types, like AI and cloud-based SaaS, may need additional elements beyond the baseline, and any effort to improve transparency should start with these minimum elements regardless of software type. That framing matters for teams trying to figure out where to start.</span></p> <p><span style="font-weight: 400;">But extending the baseline to AI and SaaS creates a practical problem most build pipelines aren&#8217;t set up to handle. &#8220;Extending the baseline to AI and SaaS moves the work from your build pipeline to your vendor contracts. You cannot hash a binary you never compile. The SBOM has to arrive with the service,&#8221; says Mitch Ashley, VP and practice lead, software lifecycle engineering and AI-native software engineering at <a href="https://futurumgroup.com/" target="_blank" rel="noopener">The Futurum Group</a>.</span></p> <h3><b>Where This Fits in the Broader Picture</b></h3> <p><span style="font-weight: 400;">This update doesn&#8217;t exist in isolation. Earlier this year, CISA and G7 partners released a companion document specifically for AI systems, aimed at helping public and private sector stakeholders improve transparency into AI supply chains, and that guidance was explicitly framed as supplemental to the general SBOM minimum elements, since AI systems are still software systems but bring extra components like models, datasets, and other AI-specific artifacts. The 2026 baseline and the AI-specific guidance were clearly built to work together.</span></p> <p><span style="font-weight: 400;">AI adds a wrinkle that traditional SBOM programs weren&#8217;t designed around. &#8220;AI is harder, because a model or dataset can change without a build ever running. Programs keyed to release events will miss those changes. Decide which components you require SBOMs for and write it into renewal terms,&#8221; Ashley says.</span></p> <p><span style="font-weight: 400;">There&#8217;s a second, quieter problem underneath all of this, and it doesn&#8217;t go away just because the guidance got better. Justin Beals, CEO and founder of Strike Graph, argues the harder issue was never producing the document. &#8220;Plenty of organizations can produce an SBOM document. Far fewer can prove the components listed in it are still accurate six months later,&#8221; he says. As SBOM requirements get pulled deeper into frameworks like CMMC and FedRAMP, Beals sees that gap becoming the real point of failure: &#8220;It&#8217;s the same gap we see across every framework leaning on SBOMs right now: a static list, filed once, treated as proof of ongoing security. It isn&#8217;t. It&#8217;s a snapshot.&#8221;</span></p> <p><span style="font-weight: 400;">It&#8217;s also worth noting what&#8217;s changed on the federal enforcement side. In January 2026, OMB issued M-26-05, which rescinded prior mandatory self-attestation memoranda in favor of an agency-led, risk-based approach, even though Executive Order 14028 itself remains in effect. So the federal posture is shifting away from blanket mandates and toward agencies making their own risk calls. That makes clear, well-structured minimum elements guidance more important, not less. Agencies need a solid baseline to build risk-based decisions on top of.</span></p> <h3><b>What This Means for Practitioners</b></h3> <p><span style="font-weight: 400;">If your organization already generates SBOMs in CycloneDX or SPDX format, most of the new fields are additive rather than disruptive. Both formats already support hash-based component identification, so adding hash values is a configuration change in your build pipeline rather than a format migration. The bigger lift is Ashley&#8217;s point: for AI models, datasets, and SaaS, there&#8217;s no build event to hook into. That means rethinking SBOM requirements as contract terms with vendors, not just pipeline automation.</span></p> <p><span style="font-weight: 400;">Beals&#8217; point builds on that. Producing the document, even a better-structured one, still isn&#8217;t the finish line. The organizations that get ahead of this, he says, will be the ones that build continuous validation into their SBOM process instead of generating it once to check a box. That&#8217;s the difference between attestation and evidence.</span></p> <p><span style="font-weight: 400;">For teams that haven&#8217;t started, this is a reasonable moment to pick a format and get moving. Neither CycloneDX nor SPDX is mandated here, and both are mature enough to cover the new required fields. The bigger risk is waiting for a mandate that, given the OMB shift, may never arrive in the blanket form people expected. Risk-informed procurement and vendor contracting are happening now, with or without a federal stick attached.</span></p>
  74. Tricentis Acquires Tabnine to Gain Knowledge Graph for AI Testing Agents

    Thu, 30 Jul 2026 22:01:20 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />Tricentis today revealed it is acquiring Tabnine to gain access to a knowledge graph that will be used to provide context to AI agents that have been trained to automate a range of testing tasks. Once the acquisition is complete, Tricentis plans to integrate the knowledge graph developed by Tabnine, dubbed the Enterprise Context Engine, [&#8230;]
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330.jpg 770w, https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/tricentis_tabnine_770x330-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p>Tricentis today revealed it is <a href="https://www.businesswire.com/news/home/20260730388427/en/Tricentis-Acquires-Tabnine-to-Further-Scale-Agentic-Quality-Engineering-for-the-Enterprise">acquiring Tabnine</a> to gain access to a knowledge graph that will be used to provide context to AI agents that have been trained to automate a range of testing tasks.</p> <p>Once the acquisition is complete, Tricentis plans to integrate the knowledge graph developed by Tabnine, dubbed the Enterprise Context Engine, into the company’s Agentic Quality Engineering Platform. Coupled with a vector model, that knowledge graph makes it possible to extract entities, relationships, dependencies, and architectural patterns from repositories, documentation, tickets, application programming interfaces (APIs) and infrastructure metadata in a way that is much easier for AI agents to consume and understand.</p> <p>The end result will be a platform that continuously ingests code, documentation, tickets, and APIs, providing organizational intelligence in real time and enabling multiple AI agents to share memory and context to both verify outputs and better understand the potential downstream impact of an action.</p> <p>David Colwell, vice president of AI and machine learning for Tricentis, said that, just as importantly, the capability makes it possible for AI agents to more efficiently test code in a way that serves to reduce the total number of tokens that might otherwise be required.</p> <p>It’s still early days when it comes to incorporating AI agents into DevOps workflows, but the one thing that is already clear is there is now a greater need to rely on an independent set of AI agents to verify the output of AI coding agents. In some cases, the AI agents performing testing tasks may rely on the same AI model as the coding agents, but as a general rule, the best practice would be to rely on a separate AI model, said Colwell.</p> <p>Regardless of approach, unless AI agents are integrated into testing workflows, there will be no way for DevOps teams to keep up with the pace at which code is now being generated. The end result would then be more untested code than ever making its way into production environments, which ultimately only serves to increase the total number of incidents that DevOps teams will need to later triage and remediate, noted Colwell.</p> <p>A recent Tricentis survey finds <a href="https://devops.com/survey-surfaces-pervasive-adoption-of-ai-across-sdlc/">60% of organizations already regularly ship untested code into production environments</a>. With more than two-thirds (68%) of organizations having to some degree integrated AI into software delivery workflows, it has only become more probable that untested code is finding its way into production environments. The challenge and the opportunity now is to find a way to reduce that percentage without slowing down the rate at which code is now being created.</p> <p>There is, of course, a world of difference between shipping code faster and actually delivering more value to the business. The assumption has always been that more code would by definition enable organizations to provide more value to their end customers by delivering more features and capabilities faster. Unfortunately, every time there is an incident it also serves to reduce the return on investment (ROI) from accelerating software delivery in the first place, an issue that in the age of AI has become more concerning as the volume of code being created and deployed exceeds the ability of most DevOps teams to effectively manage.</p>
  75. Validation Debt That Your Dashboards Are Not Showing

    Thu, 30 Jul 2026 20:36:47 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/ValidationDebt-e1785436095804.jpeg" class="attachment-large size-large wp-post-image" alt="Validation Debt" style="margin-bottom: 0px;" decoding="async" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/ValidationDebt-150x150.jpeg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="Validation Debt" decoding="async" />The gap between how fast AI writes code and how reliably teams verify it is quietly becoming a balance-sheet risk. Enterprise leaders are learning to measure it before it forces repayment. Every engineering organization that adopted AI coding assistants over the past two years has quietly taken on a liability that never appears on the [&#8230;]
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/ValidationDebt-e1785436095804.jpeg" class="attachment-large size-large wp-post-image" alt="Validation Debt" style="margin-bottom: 0px;" decoding="async" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/ValidationDebt-150x150.jpeg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="Validation Debt" decoding="async" /><p>The gap between how fast AI writes code and how reliably teams verify it is quietly becoming a balance-sheet risk. Enterprise leaders are learning to measure it before it forces repayment.</p> <p>Every engineering organization that adopted AI coding assistants over the past two years has quietly taken on a liability that never appears on the dashboards leadership actually reviews. Developers now generate more code than their teams can meaningfully verify, and the gap between the two compounds on every passing build until an incident forces the account to settle.</p> <p>The cost tends to land late and all at once, usually as an outage or a failed audit that traces back to a change nobody fully checked. For the executives who answer for delivery risk, the trouble is not the tooling their engineers reach for but the plain fact that verification capacity never scaled to match the new pace of output.</p> <h3><strong>The Liability That Never Reaches the Dashboard</strong></h3> <p>Leadership reporting evolved to track the things that have always mattered, delivery speed, defect counts, and uptime, and none of it shows how much unverified code a team ships in a given week. That blind spot is where validation debt takes hold, because a risk that never surfaces in the numbers is a risk leadership never thinks to question.</p> <p><a href="https://in.linkedin.com/in/muditsingh5000">Mudit</a> <a href="https://in.linkedin.com/in/muditsingh5000">Singh</a>, Co-Founder and Head of Growth at <a href="https://www.testmuai.com/">TestMU</a> <a href="https://www.testmuai.com/">AI</a> <a href="https://www.testmuai.com/">(formerly</a> <a href="https://www.testmuai.com/">LambdaTest)</a>, sees this pattern repeat across the enterprise engineering teams he meets on the company&#8217;s customer events. He observes that output jumps the moment a team adopts AI assistance while verification stays flat, and leaders rarely register the widening gap until something breaks, because nothing in their regular reporting makes the debt visible. What the team learned building KaneAI, the company&#8217;s testing agent, is that the shortfall is almost never about talent and almost always about visibility, since engineers can only guard against risks they can actually see.</p> <p>The broader argument Mudit presses is organizational rather than technical, because someone has to own validation coverage as a named responsibility instead of letting it spread thinly across a busy team. His recommendation for leaders is to track test escape rate as a reporting number they watch directly and to treat AI-generated changes as their own visible category, since once a leader assigns that ownership the conversation moves from whether the debt exists to how fast the organization intends to bring it down.</p> <h3><strong>Evidence Becomes the Standard in Regulated Work</strong></h3> <p>In regulated industries the cost of an unverified change is not measured in a quick hotfix but in an audit finding that can surface months after the code shipped. A passing test suite offers little protection when the real question is whether anyone can prove, long after the fact, that the team ever checked the behavior that mattered.</p> <p><a href="https://www.linkedin.com/in/karthikkarunanithi">Karthik</a> <a href="https://www.linkedin.com/in/karthikkarunanithi">Karunanithi</a>, a Solution Architect at <a href="https://developer.ibm.com/technologies/">IBM</a> and a Senior Member of <a href="https://www.ieee.org/">IEEE</a> with two granted United States patents in secure health data, works in exactly those settings, where a passing build has never counted as proof of much. An AI-assisted change to an authorization path once shipped with tests that mocked the very layer they should have tested, and the gap surfaced only in the audit logs, when a query ran that policy should have stopped cold. Karunanithi responded by requiring every AI-assisted change to leave behind enough evidence for another engineer to see what the tests exercised and reproduce the result later.</p> <p>The principle Karunanithi keeps returning to is that a green build tells him the pipeline ran and nothing more, so evidence rather than appearance has to become the standard the moment a missed check carries real cost. Teams that adopt his posture stop asking whether the build passed and start asking what the passing build genuinely proves, which quietly changes how they treat any code they did not write by hand.</p> <h3><strong>Human Review Cannot Scale on a Curve</strong></h3> <p>The instinct when pull request volume explodes is to ask reviewers to work harder, yet no amount of effort closes a gap that is structural rather than personal. A person can read only so much code in a day, and that ceiling does not lift just because a machine started writing several times as much.</p> <p><a href="http://linkedin.com/in/abhilashbrao">Abhilash</a> <a href="http://linkedin.com/in/abhilashbrao">Rao</a> <a href="http://linkedin.com/in/abhilashbrao">Mesala</a>, a Senior Data Engineer at <a href="https://www.meta.com/">Meta</a> with fourteen years across healthcare and enterprise systems, watched that ceiling turn into a quality problem in plain sight. On his teams the volume of AI-assisted pull requests climbed until human review could no longer keep pace, and reviewers started approving changes more shallowly even though everyone understood the depth had slipped while the builds stayed green. His group answered by routing low-risk changes to an automated reviewer inside a fixed threshold and reserving scarce human judgment for the changes that carry real consequence.</p> <p>The framing Mesala offers leaders is deliberately structural, because review capacity grows in a straight line while AI output grows on a curve, and no hiring plan closes that shape of gap. He measures post-merge defects by approval type so leadership gets a clean read on whether the balance between speed and safety is holding, and the same threshold quietly discourages the sprawling changes that tend to hide the most risk.</p> <h3><strong>Agentic Systems Raise the Interest Rate</strong></h3> <p>Everything gets harder the moment the software stops waiting for a human to press each key and starts planning its own steps. An agent that chooses a different path on every run breaks the last comfortable assumption traditional testing rested on, which is that the same input reliably produces the same output.</p> <p><a href="https://www.linkedin.com/in/ahmedzaidi/">Ahmed</a> <a href="https://www.linkedin.com/in/ahmedzaidi/">Zaidi</a>, CEO and Managing Partner at <a href="https://www.accelirate.com/">Accelirate</a>, sees the stakes climbing as enterprises move from AI-assisted code into fully agentic systems that act without a human keying each step. Zaidi points out that validation debt compounds faster once behavior stops being deterministic, because a single passing test proves even less than it did before when the system can behave differently the next time it runs.</p> <p>The recommendation Zaidi lands on for leaders deploying agents is to treat validation as a continuous practice rather than a one-time gate, re-checking behavior on every meaningful change to the prompt, the model, or the data the agent leans on. No one can check a</p> <p>shifting system a single time and then trust it to behave forever, so validation has to run as often as the system itself changes.</p> <h3><strong>Making the Debt Visible and Payable</strong></h3> <p>Validation debt behaves like any other liability a business carries, which means it stays manageable only when someone measures it, assigns it, and decides how fast to bring it down. The organizations getting ahead of it are not slowing their engineers or backing away from AI assistance in the slightest.</p> <p>Mudit Singh of TestMU returns to the discipline he opened with, urging leaders to hold every change to the same gates no matter who or what wrote it and to watch defect escape into production as the figure that tells the truth about their exposure. His closing point for executives is that generation will only accelerate from here, so the teams that fund verification as a first-class capability are the ones that keep shipping fast without quietly borrowing against their own reliability.</p>
  76. The Surprisingly High Cost of ‘Free’ Search Solutions

    Wed, 29 Jul 2026 22:26:22 -0000

    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1.jpg 770w, https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" />Not long ago, some business leaders seemed to view enterprise search as a “nice-to-have.” Or, at the very least, they considered it more of a supporting utility than a strategic, business-critical platform. Organizations use enterprise search tools to help employees locate internal documents and enable support teams to surface relevant information. And, of course, retailers [&#8230;]
    <div><img width="770" height="330" src="https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1.jpg" class="attachment-large size-large wp-post-image" alt="" style="margin-bottom: 0px;" decoding="async" srcset="https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1.jpg 770w, https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-290x124.jpg 290w, https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-360x154.jpg 360w, https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-400x171.jpg 400w" sizes="(max-width: 770px) 100vw, 770px" /></div><img width="150" height="150" src="https://devops.com/wp-content/uploads/2026/07/enterprise_search_770x330-1-150x150.jpg" class="attachment-thumbnail size-thumbnail wp-post-image" alt="" decoding="async" /><p class="p1">Not long ago, some business leaders seemed to view enterprise search as a “nice-to-have.” Or, at the very least, they considered it more of a supporting utility than a strategic, business-critical platform.</p> <p class="p1">Organizations use enterprise search tools to help employees locate internal documents and enable support teams to surface relevant information. And, of course, retailers have long needed search to help customers navigate their product catalogs. But historically, expectations have been relatively modest: Users entered a few keywords and received a list of links, and then they did the remaining legwork themselves to figure out which results were relevant.</p> <p class="p1">It’s little surprise, then, that many companies have historically relied on self-managed open-source solutions like Apache Solr for enterprise search.</p> <p class="p1">But even though the role of enterprise search has changed, many organizations’ approach to search has not. The rise of GenAI has trained customers to expect companies’ search tools to understand their search intent, deliver more relevant answers, and surface useful information even when their queries are imprecise. Employees largely expect the same from internal tools. And search has become a critical layer in the generative AI tools that organizations are building to give users instant access to context-informed intelligence.</p> <p class="p1">Leaders are beginning to understand the hidden costs of self-managing such a critical capability and are beginning to <a href="https://bigdataboutique.com/blog/apache-solr-vs-opensearch-comparison-and-key-differences-d7c790"><span class="s1">seek alternatives</span></a>.</p> <h3 class="p1"><b>Growing Demands</b></h3> <p class="p1">Eliminating the cost of a software license does not eliminate the cost of delivering enterprise search. Organizations must still supply the infrastructure and engineering talent required to keep the platform available and secure.</p> <p class="p1">Buyers tend to look at the topline number first when evaluating enterprise tools, and the $0 license fee associated with Apache Solr. But the total cost of a self-managed search platform also includes servers, storage, monitoring tools, and backups, among other expenses. Solr relies on a separate Apache ZooKeeper ensemble for cluster coordination, meaning teams must deploy, monitor, upgrade, and maintain an additional distributed system.</p> <p class="p1">These demands only grow as search becomes more important, with customer-facing AI tools and employee knowledge assistants requiring higher availability, lower latency, and even more robust security. Despite the considerable expertise available in open-source communities, self-managed search deployments do not automatically come with guaranteed response times, vendor escalation paths, or a single point of accountability. And Solr’s relatively small maintainer base and slower release cadence can make it more difficult for organizations to keep pace with developments in real-time indexing, vector search, and cloud-native operations.</p> <p class="p1">Also, every hour that internal engineers spend simply keeping search operational is an hour that they cannot devote to building new capabilities and better user experiences.</p> <p class="p1">Some organizations continue to find self-managed platforms to be worth the operational overhead. But as enterprise search becomes increasingly critical to business operations, others are concluding that a fully managed solution like Amazon OpenSearch Service is both more reliable and more economical.</p> <h3 class="p1"><b>The Benefits of Amazon OpenSearch Service</b></h3> <p class="p1"><span class="s1"><a href="https://aws.amazon.com/opensearch-service/">Amazon OpenSearch Service</a></span> is a managed retrieval engine built on OpenSearch for agentic AI, search, and analytics. It combines traditional lexical search with vector and hybrid retrieval, helping organizations match exact keywords while also understanding the semantic meaning behind users’ queries. OpenSearch also includes native tools for embedding generation, neural search, reranking, and retrieval-augmented generation.</p> <p class="p1">Cluster Insights surfaces issues with prescriptive recommendations, and OpenSearch Serverless eliminates capacity planning with automatic scaling that adapts to demand without downtime.</p> <p class="p1">All of this is to say that Amazon OpenSearch Service lets your team offload infrastructure management, allowing your engineers to focus on building.</p> <p class="p1">OpenSearch itself is an open-source, community-driven project at the Linux Foundation, with more than <a href="https://opensearch.org/blog/opensearch-at-five-building-sustainability-in-open-source-infrastructure/"><span class="s1">2 billion downloads</span></a> and contributions from thousands of contributors across hundreds of organizations. This means that you can benefit from neutral governance and long-term sustainability, while also taking advantage of the scalability, availability, and operational simplicity made possible by partnering with Amazon for delivery and management.</p> <p class="p1">Real-world case studies show dramatic results for companies that make a switch. For example, the social media analytics firm <a href="https://aws.amazon.com/solutions/case-studies/audiense-opensearch-case-study/"><span class="s1">Audiense</span></a> saw a 1,400% reduction in query time after migrating workloads from Apache Solr to Amazon OpenSearch Service. The company’s engineers now spend around half an hour per quarter on maintenance, compared to frequent manual maintenance beforehand.</p> <p class="p1">BigData Boutique worked with <a href="https://aws.amazon.com/solutions/case-studies/yotpo-case-study/"><span class="s1">Yotpo</span></a>, an ecommerce retention marketing company, to migrate to Amazon OpenSearch Service from its existing self-managed search solution, after errors from manual configurations led to multiple problems. As a result of the move, the company lowered cluster costs by 11% and cut around three weeks of annual maintenance work.</p> <p class="p1">As with any major migration, there will be <a href="https://bigdataboutique.com/blog/guide-to-migrating-from-apache-solr-to-opensearch-c0e755"><span class="s1">challenges</span></a>. Organizations often lean on a partner like BigData Boutique to help them navigate API and feature differences, query language translation, configuration migration, custom plugins, change management, and other hurdles.</p> <h3 class="p1"><b>Making the Move</b></h3> <p class="p1">To learn more, <a href="https://webinars.techstronglearning.com/migrating-self-managed-apache-solr-workloads-to-amazon-opensearch-service?utm_campaign=46412554-2026.08.05%2520AWS&amp;utm_source=bigdata&amp;utm_medium=bmregister"><span class="s1">watch the on-demand webinar</span></a> hosted by Techstrong, all about migrating Apache Solr workloads to Amazon OpenSearch Service.</p> <p class="p1">We cover:</p> <ul class="ul1"> <li class="li1">Why organizations are modernizing their search platforms.</li> <li class="li1">The key differences between Apache Solr and Amazon OpenSearch Service, including performance, scalability, and AI/ML capabilities.</li> <li class="li1">How to solve common challenges and streamline your migration journey.</li> </ul> <p class="p1">Watch if your organization is looking to improve search performance, reduce management burdens for internal teams, or simply prepare your environment for the future of AI. If you already know you’re looking to make a change, click <a href="https://bigdataboutique.com/solutions/migrate-solr-to-opensearch"><span class="s1">here</span></a> to schedule a meeting about migrating from Apache Solr to OpenSearch.</p>
  77. Gemini Robotics ER 2: powering robotics with video understanding, task orchestration, and multi-robot collaboration

    Thu, 30 Jul 2026 15:00:59 -0000

    Gemini Robotics ER 2 helps robots reason, collaborate, and solve real-world tasks. It represents a step change in video understanding, tool orchestration, and multi-robot collaboration for robotic applications.
  78. We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control

    Wed, 29 Jul 2026 16:02:10 -0000

  79. Gemini Robotics 2 brings whole body intelligence to robots

    Tue, 28 Jul 2026 13:21:37 -0000

  80. Accelerating the frontiers of scientific discovery: Google’s $40M commitment to the Genesis Mission

    Wed, 22 Jul 2026 13:38:54 -0000

    Google commits $40M in AI tokens and credits for the Genesis Mission
  81. Introducing Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber

    Tue, 21 Jul 2026 15:16:30 -0000

    We’re introducing new Gemini models, including Gemini 3.6 Flash, 3.5 Flash-Lite and 3.5 Flash Cyber.
  82. Introducing Gemini 3.5 Flash Cyber

    Fri, 17 Jul 2026 15:00:11 -0000

    Google introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model to find and patch vulnerabilities.
  83. Our approach to bioresilience

    Thu, 16 Jul 2026 09:30:42 -0000

    Google DeepMind and Isomorphic Labs are sharing our joint approach to bioresilience and AI models.
  84. Empowering India’s next generation of innovators with ATL Saathi

    Mon, 13 Jul 2026 12:37:28 -0000

    Google and AIM launched ATL Saathi, a Gemini-powered AI tool empowering Indian educators in robotics labs.
  85. Google DeepMind and A24 announce first-of-its-kind research partnership

    Fri, 03 Jul 2026 14:25:43 -0000

  86. Start building with Nano Banana 2 Lite and Gemini Omni Flash

    Tue, 30 Jun 2026 16:02:40 -0000

  87. Introducing computer use in Gemini 3.5 Flash

    Wed, 24 Jun 2026 16:30:01 -0000

  88. Unlocking UK house-building with AI-accelerated planning

    Tue, 16 Jun 2026 21:29:50 -0000

    UK government partners with Google DeepMind to build a new AI-powered prototype aimed at faster housing decisions.
  89. Securing the future of AI agents

    Tue, 16 Jun 2026 15:46:31 -0000

    Securing internal systems with an AI Control Roadmap, combining traditional safeguards and real-time monitoring.
  90. DiffusionGemma: 4x faster text generation

    Wed, 10 Jun 2026 16:24:11 -0000

  91. Investing in multi-agent AI safety research

    Wed, 10 Jun 2026 10:21:19 -0000

    Google DeepMind and partners announce a $10M funding call for multi-agent safety research.
  92. Fluid, natural voice translation with Gemini 3.5 Live Translate

    Tue, 09 Jun 2026 15:16:25 -0000

    Gemini 3.5 Live Translate brings near real-time, natural speech translation to Google AI Studio, Google Translate and Google Meet.
  93. Introducing Gemma 4 12B: a unified, encoder-free multimodal model

    Tue, 09 Jun 2026 14:10:19 -0000

  94. Powering the future of robotics in Europe

    Tue, 09 Jun 2026 14:02:33 -0000

  95. Measuring the impact of learning with AI in Sierra Leone and beyond

    Mon, 08 Jun 2026 13:04:59 -0000

    Results from a randomized controlled trial show the potential of Gemini’s Guided Learning feature to boost engagement and accelerate learning.
  96. We’re launching the Google DeepMind Accelerator program in Asia Pacific to tackle environmental risks

    Thu, 21 May 2026 19:46:42 -0000

  97. Fast-tracking genetic leads to reverse cellular aging

    Mon, 18 May 2026 18:21:39 -0000

    Biologists use Co-Scientist to find novel factors that successfully rejuvenate human cells.
  98. Simulate real-world places with Project Genie and Street View

    Sun, 17 May 2026 19:53:18 -0000

    We’re expanding access to Google AI Ultra subscribers globally and introducing a new capability powered by Street View.
  99. Introducing Gemini Omni

    Sun, 17 May 2026 19:50:57 -0000

  100. Introducing Google Antigravity 2.0

    Sun, 17 May 2026 19:43:45 -0000

  101. Gemini for Science: AI experiments and tools for a new era of discovery

    Sun, 17 May 2026 13:50:34 -0000

    A collection of science tools and experiments to expand the scale and precision of scientific exploration.
  102. Making it easier to understand how content was created and edited

    Sun, 17 May 2026 13:43:50 -0000

    We're expanding our tools to help you understand how content was created and edited across the web.
  103. Strengthening Singapore’s AI Future: A New National Partnership

    Sat, 16 May 2026 09:13:34 -0000

    Google DeepMind and Singapore partner to apply frontier AI to address complex challenges across health, education, and sustainability and more.
  104. Finding the molecular switches behind new infectious diseases

    Sat, 16 May 2026 08:16:06 -0000

    Clare Bryant uses Co-Scientist to identify genetic triggers in emerging infectious diseases.
  105. Opening new paths in aging research

    Sat, 16 May 2026 08:08:44 -0000

    Calico Life Sciences uses Co-Scientist to connect scattered findings and generate new leads in aging research.
  106. Accelerating discovery of liver disease mechanisms

    Sat, 16 May 2026 08:00:15 -0000

    Filippo Menolascina uses Co-Scientist to identify new liver disease treatments and explain why existing drugs only help certain patients.
  107. Uniting biological toolkits for a new approach to ALS

    Sat, 16 May 2026 07:53:11 -0000

    Co-Scientist unites Boston Children’s Hospital and MIT’s labs to explore new RNA-based treatments for ALS.
  108. Uncovering repurposed medicines to fight liver fibrosis

    Sat, 16 May 2026 07:40:27 -0000

    Stanford geneticist uses Co-Scientist to help find new treatments for chronic liver disease and liver fibrosis.
  109. How WeatherNext helped the National Hurricane Center better predict Hurricane Melissa’s historic landfall in Jamaica

    Sat, 16 May 2026 03:14:17 -0000

    Learn how our WeatherNext AI model help forecasters give communities unprecedented time to prepare ahead of the historic Hurricane Melissa.
  110. Gemini 3.5: frontier intelligence with action

    Fri, 15 May 2026 22:50:12 -0000

    Gemini 3.5 is built to help you execute complex, agentic workflows.
  111. Co-Scientist: A multi-agent AI partner to accelerate research

    Tue, 12 May 2026 14:40:07 -0000

    Introducing Co-Scientist, a collaborative AI partner built with Gemini to help researchers accelerate scientific breakthroughs.
  112. AlphaEvolve: How our Gemini-powered coding agent is scaling impact across fields

    Wed, 06 May 2026 10:43:49 -0000

    Explore how AlphaEvolve's Gemini-powered algorithms are driving impact across business, infrastructure, and science.
  113. Enabling a new model for healthcare with AI co-clinician

    Thu, 30 Apr 2026 12:14:15 -0000

    Researching the path to AI-augmented care and development of an AI co-clinician.
  114. Announcing our partnership with the Republic of Korea

    Mon, 27 Apr 2026 07:00:06 -0000

    Google DeepMind and Korea partner to accelerate scientific breakthroughs using frontier AI models
  115. Decoupled DiLoCo: A new frontier for resilient, distributed AI training

    Wed, 22 Apr 2026 10:20:03 -0000

  116. Partnering with industry leaders to accelerate AI transformation

    Tue, 21 Apr 2026 14:54:15 -0000

    Google DeepMind partners with global consultancies to bring the power of frontier AI to organizations around the world.
  117. Gemini 3.1 Flash TTS: the next generation of expressive AI speech

    Wed, 15 Apr 2026 16:03:19 -0000

    Our newest audio model introduces granular audio tags that give you precise control to direct AI speech for expressive audio generation.
  118. Gemini Robotics-ER 1.6: Powering real-world robotics tasks through enhanced embodied reasoning

    Mon, 13 Apr 2026 15:52:13 -0000

    Gemini Robotics ER 1.6: Enhancing spatial reasoning and multi-view understanding for autonomous robotics.
  119. Gemma 4: Byte for byte, the most capable open models

    Thu, 02 Apr 2026 16:00:49 -0000

    Gemma 4: Our most intelligent open models to date, purpose-built for advanced reasoning and agentic workflows.
  120. Reimagining the mouse pointer for the AI era

    Sun, 29 Mar 2026 10:50:49 -0000

    Google DeepMind is transforming the mouse pointer into a context-aware AI partner. Move beyond the friction of traditional prompting with intuitive AI collaboration in Chrome and beyond.
  121. Gemini 3.1 Flash Live: Making audio AI more natural and reliable

    Thu, 26 Mar 2026 15:23:35 -0000

    Our latest voice model has improved precision and lower latency to make voice interactions more fluid, natural and precise.
  122. Protecting people from harmful manipulation

    Wed, 25 Mar 2026 16:46:20 -0000

    Google DeepMind researches AI's harmful manipulation risks across areas like finance and health, leading to new safety measures.
  123. Lyria 3 Pro: Create longer tracks in more

    Wed, 25 Mar 2026 16:01:39 -0000

    Introducing Lyria 3 Pro, which unlocks longer tracks with structural awareness. We’re also bringing Lyria to more Google products and surfaces.
  124. Measuring progress toward AGI: A cognitive framework

    Tue, 17 Mar 2026 16:03:47 -0000

    We’re introducing a framework to measure progress toward AGI, and launching a Kaggle hackathon to build the relevant evaluations.
  125. From games to biology and beyond: 10 years of AlphaGo’s impact

    Mon, 09 Mar 2026 13:52:36 -0000

    Ten years since AlphaGo, we explore how it is catalyzing scientific discovery and paving a path to AGI.
  126. Gemini 3.1 Flash-Lite: Built for intelligence at scale

    Tue, 03 Mar 2026 16:35:55 -0000

    Gemini 3.1 Flash-Lite is our fastest and most cost-efficient Gemini 3 series model yet.
  127. Nano Banana 2: Combining Pro capabilities with lightning-fast speed

    Thu, 26 Feb 2026 16:01:50 -0000

    Our latest image generation model offers advanced world knowledge, production ready specs, subject consistency and more, all at Flash speed.
  128. Gemini 3.1 Pro: A smarter model for your most complex tasks

    Thu, 19 Feb 2026 16:06:14 -0000

    3.1 Pro is designed for tasks where a simple answer isn’t enough.
  129. A new way to express yourself: Gemini can now create music

    Wed, 18 Feb 2026 16:01:38 -0000

    The Gemini app now features our most advanced music generation model Lyria 3, empowering anyone to make 30-second tracks using text or images.
  130. Accelerating discovery in India through AI-powered science and education

    Tue, 17 Feb 2026 13:42:20 -0000

    Google DeepMind brings National Partnerships for AI initiative to India, scaling AI for science and education
  131. Gemini 3 Deep Think: Advancing science, research and engineering

    Thu, 12 Feb 2026 16:15:09 -0000

    Our most specialized reasoning mode is now updated to solve modern science, research and engineering challenges.
  132. Accelerating Mathematical and Scientific Discovery with Gemini Deep Think

    Mon, 09 Feb 2026 16:12:06 -0000

    Research papers point to the growing impact of Deep Think across fields
  133. Project Genie: Experimenting with infinite, interactive worlds

    Thu, 29 Jan 2026 17:01:05 -0000

    Google AI Ultra subscribers in the U.S. can try out Project Genie, an experimental research prototype that lets you create and explore worlds.
  134. D4RT: Teaching AI to see the world in four dimensions

    Fri, 16 Jan 2026 10:39:00 -0000

    D4RT: Unified, efficient 4D reconstruction and tracking up to 300x faster than prior methods.
  135. Veo 3.1 Ingredients to Video: More consistency, creativity and control

    Tue, 13 Jan 2026 17:00:18 -0000

    Our latest Veo update generates lively, dynamic clips that feel natural and engaging — and supports vertical video generation.
  136. Google's year in review: 8 areas with research breakthroughs in 2025

    Tue, 23 Dec 2025 17:01:02 -0000

    Google 2025 recap: Research breakthroughs of the year
  137. Gemini 3 Flash: frontier intelligence built for speed

    Wed, 17 Dec 2025 11:58:17 -0000

    Gemini 3 Flash offers frontier intelligence built for speed at a fraction of the cost.
  138. Gemma Scope 2: helping the AI safety community deepen understanding of complex language model behavior

    Tue, 16 Dec 2025 10:14:24 -0000

    Open interpretability tools for language models are now available across the entire Gemma 3 family with the release of Gemma Scope 2.
  139. Improved Gemini audio models for powerful voice experiences

    Fri, 12 Dec 2025 17:50:50 -0000

  140. Deepening our partnership with the UK AI Security Institute

    Thu, 11 Dec 2025 00:06:40 -0000

    Google DeepMind and UK AI Security Institute (AISI) strengthen collaboration on critical AI safety and security research
  141. Strengthening our partnership with the UK government to support prosperity and security in the AI era

    Wed, 10 Dec 2025 14:59:21 -0000

    Deepening our partnership with the UK government to support prosperity and security in the AI era
  142. FACTS Benchmark Suite: Systematically evaluating the factuality of large language models

    Tue, 09 Dec 2025 11:29:03 -0000

    Systematically evaluating the factuality of large language models with the FACTS Benchmark Suite.
  143. Engineering more resilient crops for a warming climate

    Thu, 04 Dec 2025 16:23:24 -0000

    Scientists are using AlphaFold to strengthen a photosynthesis enzyme for resilient, heat-tolerant crops.
  144. AlphaFold: Five years of impact

    Tue, 25 Nov 2025 16:00:12 -0000

    Explore how AlphaFold has accelerated science and fueled a global wave of biological discovery.
  145. Revealing a key protein behind heart disease

    Tue, 25 Nov 2025 15:52:51 -0000

    AlphaFold has revealed the structure of a key protein behind heart disease
  146. Google DeepMind supports U.S. Department of Energy on Genesis: a national mission to accelerate innovation and scientific discovery

    Mon, 24 Nov 2025 14:12:03 -0000

    Google DeepMind and the DOE partner on Genesis, a new effort to accelerate science with AI.
  147. How we’re bringing AI image verification to the Gemini app

    Thu, 20 Nov 2025 15:13:19 -0000

  148. Build with Nano Banana Pro, our Gemini 3 Pro Image model

    Thu, 20 Nov 2025 15:11:14 -0000

  149. Introducing Nano Banana Pro

    Thu, 20 Nov 2025 15:05:02 -0000

  150. Start building with Gemini 3

    Tue, 18 Nov 2025 17:49:13 -0000

  151. We’re expanding our presence in Singapore to advance AI in the Asia-Pacific region

    Tue, 18 Nov 2025 17:00:00 -0000

    Google DeepMind opens a new Singapore research lab, accelerating AI progress in the Asia-Pacific region.
  152. A new era of intelligence with Gemini 3

    Tue, 18 Nov 2025 16:06:41 -0000

  153. Introducing Google Antigravity

    Tue, 18 Nov 2025 16:06:32 -0000

  154. WeatherNext 2: Our most advanced weather forecasting model

    Mon, 17 Nov 2025 15:09:23 -0000

    The new AI model delivers more efficient, more accurate and higher-resolution global weather predictions.
  155. SIMA 2: An Agent that Plays, Reasons, and Learns With You in Virtual 3D Worlds

    Thu, 13 Nov 2025 14:52:18 -0000

    Introducing SIMA 2, a Gemini-powered AI agent that can think, understand, and take actions in interactive environments.
  156. Teaching AI to see the world more like we do

    Tue, 11 Nov 2025 11:49:13 -0000

    Our new paper analyzes the important ways AI systems organize the visual world differently from humans.
  157. How AI is giving Northern Ireland teachers time back

    Mon, 10 Nov 2025 16:50:39 -0000

    A six-month long pilot program with the Northern Ireland Education Authority’s C2k initiative found that integrating Gemini and other generative AI tools saved participating teachers an average of 10 hours per week.
  158. Mapping, modeling, and understanding nature with AI

    Wed, 05 Nov 2025 16:59:46 -0000

    AI models can help map species, protect forests and listen to birds around the world
  159. Accelerating discovery with the AI for Math Initiative

    Wed, 29 Oct 2025 14:31:13 -0000

    The initiative brings together some of the world's most prestigious research institutions to pioneer the use of AI in mathematical research.
  160. T5Gemma: A new collection of encoder-decoder Gemma models

    Sat, 25 Oct 2025 18:14:00 -0000

    Introducing T5Gemma, a new collection of encoder-decoder LLMs.
  161. MedGemma: Our most capable open models for health AI development

    Sat, 25 Oct 2025 18:02:50 -0000

    We’re announcing new multimodal models in the MedGemma collection, our most capable open models for health AI development.
  162. Introducing Gemma 3n: The developer guide

    Sat, 25 Oct 2025 17:54:47 -0000

    Gemma 3n is designed for the developer community that helped shape Gemma.
  163. Gemini 2.5 Flash-Lite is now ready for scaled production use

    Sat, 25 Oct 2025 17:34:32 -0000

    Gemini 2.5 Flash-Lite, previously in preview, is now stable and generally available. This cost-efficient model provides high quality in a small size, and includes 2.5 family features like a 1 million-token context window and multimodality.
  164. Behind “ANCESTRA”: combining Veo with live-action filmmaking

    Sat, 25 Oct 2025 17:27:10 -0000

    We partnered with Darren Aronofsky, Eliza McNitt and a team of more than 200 people to make a film using Veo and live-action filmmaking.
  165. AlphaEarth Foundations helps map our planet in unprecedented detail

    Fri, 24 Oct 2025 19:06:32 -0000

    New AI model integrates petabytes of Earth observation data to generate a unified data representation that revolutionizes global mapping and monitoring
  166. Exploring the context of online images with Backstory

    Fri, 24 Oct 2025 03:17:11 -0000

    New experimental AI tool helps people explore the context and origin of images seen online.
  167. Advanced version of Gemini with Deep Think officially achieves gold-medal standard at the International Mathematical Olympiad

    Fri, 24 Oct 2025 03:12:29 -0000

    The International Mathematical Olympiad (“IMO”) is the world’s most prestigious competition for young mathematicians, and has been held annually since 1959. Each country taking part is represented by six elite, pre-university mathematicians who compete to solve six exceptionally difficult problems in algebra, combinatorics, geometry, and number theory.
  168. Aeneas transforms how historians connect the past

    Fri, 24 Oct 2025 02:58:37 -0000

    Introducing the first model for contextualizing ancient inscriptions, designed to help historians better interpret, attribute and restore fragmentary texts.
  169. Genie 3: A new frontier for world models

    Fri, 24 Oct 2025 02:54:30 -0000

    Genie 3 can generate dynamic worlds that you can navigate in real time at 24 frames per second, retaining consistency for a few minutes at a resolution of 720p.
  170. How AI is helping advance the science of bioacoustics to save endangered species

    Fri, 24 Oct 2025 02:30:54 -0000

    Our new Perch model helps conservationists analyze audio faster to protect endangered species, from Hawaiian honeycreepers to coral reefs.
  171. Using AI to perceive the universe in greater depth

    Fri, 24 Oct 2025 02:21:07 -0000

    Using AI to perceive the universe in greater depth
  172. Gemini achieves gold-medal level at the International Collegiate Programming Contest World Finals

    Fri, 24 Oct 2025 00:22:10 -0000

    Gemini 2.5 Deep Think achieves breakthrough performance at the world’s most prestigious computer programming competition, demonstrating a profound leap in abstract problem solving.
  173. Discovering new solutions to century-old problems in fluid dynamics

    Fri, 24 Oct 2025 00:02:06 -0000

    Our new method could help mathematicians leverage AI techniques to tackle long-standing challenges in mathematics, physics and engineering.
  174. Strengthening our Frontier Safety Framework

    Thu, 23 Oct 2025 23:44:10 -0000

    We’re strengthening the Frontier Safety Framework (FSF) to help identify and mitigate severe risks from advanced AI models.
  175. Gemini Robotics 1.5 brings AI agents into the physical world

    Thu, 23 Oct 2025 23:33:58 -0000

    We’re powering an era of physical agents — enabling robots to perceive, plan, think, use tools and act to better solve complex, multi-step tasks.
  176. Introducing CodeMender: an AI agent for code security

    Thu, 23 Oct 2025 23:05:51 -0000

    Using advanced AI to fix critical software vulnerabilities