Operations | Monitoring | ITSM | DevOps | Cloud

AI Can Write Infinite Code. But Can We Ship It Safely?

AI is making code generation faster than ever. But writing code is only half the battle. Neil Watkins from Burns & McDonnell explains why the next big challenge in AI-driven software development isn't generating more code. It's making sure that code can be tested, secured, and deployed safely. As AI accelerates development, businesses need to rethink how they manage risk and ship software with confidence.

Security Just Hit Machine Speed

What if we could eliminate vulnerabilities before they become a problem? Neil Watkins from Burns & McDonnell explains how AI, automated security assessments, and Harness CI/CD capabilities could transform vulnerability management. From reducing attack surfaces to rapidly responding to critical zero-day vulnerabilities, the future of security is about moving faster without slowing down developers.

php2shell: the flaw hiding all across the web

Discover how php2shell vulnerabilities expose PHP servers to remote code execution and how Harness virtual patching protects endpoints while you deploy fixes. On October 21, 2026, the PHP project rushed out emergency patches for two critical flaws nicknamed php2shell (CVE-2026-109618 and CVE-2026-109619, both rated 9.2 out of 10). This isn't a bug in some plugin or a server someone set up wrong. It's in PHP itself, in the way the language has handled errors since 2012.

Bring Your Own Identity Provider to Harness MCP

Learn how Harness MCP OAuth proxy mode enables enterprise developers to use their own identity provider without static tokens or shared credentials. OAuth proxy mode lets enterprises run Harness MCP behind their own identity provider, with no static tokens anywhere in the chain. Coding agents write the change. Harness agents take it through production, running the builds, tests, scans, and deployments that follow, with policy enforced on every action.

Why Was an OpenAI Engineer Hiding a Recording Device?

An OpenAI engineer was arrested after a hidden recording device was discovered inside an executive conference room. Who was he trying to record, and who was the information intended for? Martin Reynolds and Adam Arellano break down one of the strangest AI security stories of the year, along with three major cybersecurity headlines. Microsoft just released more than 1,400 security fixes in a record-breaking Patch Tuesday. Is AI finding vulnerabilities faster than companies can actually fix them?

Introducing AI Budgets: A Policy You Can Watch Work

AI Budgets turns an AI cost policy into a limit customers can watch hold in real time, so overspend gets caught within days instead of surfacing on next month's invoice. With AI Budgets, the Cost Management Agent turns your AI cost policy from a document everyone signed once and forgot into a limit you can see working. ‍ In our last post, we showed why 73% of organizations have an AI cost policy, but only 13% can tell whether it's working.

Harness Launches VegaLoad: Open-Source Load Testing for Agentic Developers

VegaLoad is a free, open-source load testing tool for agentic developers. Your agent writes the test, runs it, and gives you a report. VegaLoad is a free, open-source load testing tool. You ask your agent for a test. It writes the file, runs it, and gives you a report.

We used our own product to cut our AI tooling bill without cutting AI usage

The problem: our AI spend was growing faster than our understanding of its ROI. Like most engineering organizations, Harness went from "a few people are trying out AI coding tools" to "AI tooling is a line item in the monthly finance review" in a matter of months. The cost itself wasn't really the problem.