Operations | Monitoring | ITSM | DevOps | Cloud

OAuth 2.0 is often treated as a solved security problem; configured once, then forgotten. In reality, OAuth-based authentication is one of the most fragile dependencies in modern API ecosystems. When OAuth breaks, APIs don’t just degrade gracefully; they often fail completely. For DevOps and engineering teams, OAuth 2.0 authentication sits before application logic, before business rules, and before observability inside the service itself.

APIs sit at the core of modern applications. They power mobile apps, connect microservices, and enable third-party integrations, making them critical to performance, reliability, and revenue. That’s why most teams invest heavily in API testing tools like Postman, automated test suites, and online API testers. And yet, production outages still happen. This disconnect (“our APIs were tested, so why did they fail?”) is where confusion between API testing and Web API monitoring begins.

Virtual machines often represent the largest line item in a cloud bill. And for Google Cloud users, the Google Compute Engine (GCE) accounts for a large share of overall spend. GCE offers rich flexibility: you can choose specific machine types, scale up or down instantly, and match compute to load. But understanding how the pricing works is critical before you can unlock full value. On the surface, GCE looks simple. You pay for vCPU, memory, storage, and network.

This guest blog post is authored by Anatoly Mikhaylov, a Principal Engineer at Zendesk and Datadog Ambassador, and by Nick Hefty, a Senior Engineer at Zendesk.

Synthetic monitoring evolved from simple uptime checks to a complex technical field in modern digital operations. The real challenge for organizations that use synthetic monitoring software isn’t implementing the monitoring; it’s writing scripts that stay accurate, simple to maintain, and resistant to changes in the application.

InvGate has obtained the ISO/IEC 27001:2022 certification, reinforcing our commitment to managing security risks related to the data we own or handle according to industry standards. This new certification adds up to the SOC 2 Type II certification we renewed early this year, aimed to verify customer data protection. “ISO/IEC 27001 is a strong indicator of a company's commitment to its security landscape and responsibilities.

Postman API test automation is a critical part of modern API development. Teams rely on Postman collections, scripts, and automated tests to validate endpoints, catch functional issues early, and ensure APIs behave correctly during development and CI/CD pipelines. But as APIs move into production, test automation alone leaves important gaps.

Advanced synthetic monitoring has become an essential for any strong digital plan, not simply a nice-to-have feature. Our reasoning is because users expect websites and apps to work well all the time. As we approach 2026, the top synthetic monitoring solutions have greatly improved, going from just checking if a service is online to ensuring a complete and positive digital experience.

Dawid Dębowski is a software engineer at G2A.COM and a Grafana Champion. Holding an MS of Computer Science, Dawid’s main fields of interest related to observability are PromQL and data visualizations using Grafana. If you’ve ever worked with custom metrics in a Prometheus environment, you've probably heard about something called "high cardinality"—or at least I hope you have.

IT Operations keeps systems running, services stable, and users supported across on-prem, cloud, and hybrid environments. It covers everything involved in maintaining daily technology functions: managing infrastructure, monitoring performance, controlling risk, resolving incidents, and ensuring business continuity. For teams asking What is IT Operations? – the answer starts here, with the processes and responsibilities that keep an organization’s digital backbone steady.