From Traces to Experiments: The 5-Stage Loop for Improving AI Agents in Production
Datadog's framework for turning AI agent traces into actionable improvements — from pattern identification to production A/B testing — addresses the gap that offline evaluation alone can't close.
HashiCorp Vault Agentic IAM Is Now GA: Managing AI Agents Like Identities
Vault Enterprise 2.1 brings AI agent identity management to general availability — per-request OAuth controls, a centralized agent registry, and Terraform provisioning for agent credentials.
Datadog's Bitbucket Cloud Integration: Source Code Context in Every Trace
Datadog's new Bitbucket Cloud source code integration connects running services to their commit history, surfaces code snippets inline during troubleshooting, and posts automated PR feedback. Here's what changes for teams using Bitbucket.
How Datadog Bits Proves a Query Rewrite Is Actually Faster — Not Just Theoretically
Datadog's Bits Database Optimization generates synthetic production environments to validate query rewrites against three metrics before recommending them. Here's the methodology that makes it trustworthy.
Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles Are Now GA
Kubernetes v1.37 graduates Pod Certificates and Cluster Trust Bundles to stable. They replace bearer token JWTs with proof-of-possession mTLS credentials — closing a workload identity gap that has existed since the beginning.
Kubernetes v1.37 Pod Certificates: Why Bearer Tokens Were Never Enough
Pod Certificates and Cluster Trust Bundles hit GA in Kubernetes v1.37, replacing bearer token identity with proof-of-possession X.509 credentials.
What Datadog Learned About AI Agent Security by Monitoring Its Own Agents
Datadog's internal agent monitoring revealed that 69% of input tokens live in system prompts teams can't inspect, coding agents execute repo-controlled code before the first user message, and prompt injection bypasses model evaluation entirely.
Datadog Live Debugger: Fix Production Bugs Without Writing a Single Deploy
Datadog's Live Debugger attaches logpoints to running services and collects variable snapshots without code changes or restarts — with Bits AI converting a plain-language bug description into a production-backed code fix.
How Datadog Saves $1 Million a Month on AI: The Optimization Playbook
Datadog cut over $1M/month in AI costs by migrating models, adjusting effort levels, and deploying context optimization. The specific numbers and methods behind each lever.
Golden Paths for AI Agents: What Platform Engineering Gets Wrong When the User Isn't Human
Datadog's framework for redesigning golden paths when AI agents replace human developers as platform users — deterministic enforcement, machine-readable contracts, and audit co-authorship.
Golden Paths for AI Agents: Redesigning Platform Workflows for Non-Human Users
Agents are now platform users. Datadog maps three required changes: execution patterns, deterministic controls, and dispatch authorization before agent runs.
Coding Agents Are Pulling Packages Your Security Team Can't See
AI coding agents like Cursor and Claude Code bypass traditional package governance by pulling dependencies directly from public registries. JFrog's agent package resolution closes that gap before the next supply chain incident.
Agent Immunization: The Software Supply Chain Security Model Built for AI Speed
JFrog's agent immunization framework embeds trust enforcement inside what AI agents consume—not at the perimeter—because perimeter security cannot keep pace with agentic development velocity.
JFrog Fly Graduates: What an Agentic Repository Actually Means for Enterprise CI/CD
JFrog Fly's agentic repository capabilities are now part of the main JFrog Platform. The experiment is over. The question now is what enterprise teams do with it.
How Bedrock AgentCore Propagates User Identity to JFrog Artifactory — and Why It Matters
When an AI agent calls a tool on behalf of a user, who gets the audit trail? Bedrock AgentCore's On-Behalf-Of token exchange solves the shared-credential problem that makes agent-to-Artifactory calls untrustworthy.
Datadog Risk AI: How Systemic Risk Detection Moves Beyond Individual Findings
Datadog's Risk Engineering team built an AI agent layer that correlates security signals across vulnerability, identity, and exposure dimensions — recognizing that severity and risk aren't the same thing.
MCP vs API: CircleCI's Practical Guide to When Each Makes Sense
CircleCI's engineering blog clarifies the actual distinction between APIs and MCP — and why the answer for most agentic systems is 'both, for different purposes.'
How Datadog Scaled Git Serving 20x Without Slowing CI Down
Datadog's GitRetriever sustains 20× CI traffic growth at 40ms median latency — a two-tier mirror/relay architecture for monorepo CI that any platform team can adapt.
How to Trace AWS Lambda Durable Functions with Datadog
Datadog's Node.js and Python tracers now instrument AWS Lambda Durable Functions automatically — connecting multi-invocation workflows into a single unified flame graph without code changes.
Datadog Work Management: One Queue for Humans and AI Agents
Datadog's renamed Work Management platform centralizes human and AI agent task tracking with full observability context attached. Here's what it solves that Jira and Slack threads don't.
AI Just Found a 27-Year-Old Vulnerability. Your AppSec Stack Wasn't Built for This Speed.
Claude Mythos Preview independently found and weaponized a 27-year-old OpenBSD flaw, a 16-year-old FFmpeg bug, and a 17-year-old FreeBSD RCE. JFrog's analysis explains why fragmented security tooling can't keep up.
Scale Your Platform Without Becoming the Bottleneck: The JFrog Projects Framework
Growing engineering orgs hit a wall when centralized platform admins become the constraint. JFrog Projects introduces delegated administration, project-scoped RBAC, and isolation by default — with a model that scales to 120,000+ repos.
Eleven Minutes, Zero Humans: How This Kubernetes Upgrade Pipeline Works
A production Kubernetes control plane upgraded across three nodes in 11 minutes without manual intervention. Here's the six-tool pipeline behind it, the critical concurrency mistake to avoid, and what self-healing actually requires.
Packer v1.16.0 Brings SLSA Provenance to Machine Images — Here's What That Means
HashiCorp's Packer v1.16.0 adds native SLSA provenance generation and verification to machine image builds. The result: cryptographically signed build records, four signing modes, and packer verify-attestation for enforcement pipelines.