# Harness Blog Harness is a self-service CI/CD platform that allows engineers and DevOps to build, test, deploy, and verify software, on-demand. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Beyond the sync: Argo CD needs an Enterprise Control Plane DevFeed: [Beyond the sync: Argo CD needs an Enterprise Control Plane]() Original publisher: [Read original article]() Author: Eric Minick Sudarshan Purohit Published: 2026-09-16T20:28:57.610955Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [argo-cd](), [GitOps](), [Orchestration](), [DevOps](), [Platform Engineering](), [Deployment](), [Artificial Intelligence]() Tags: [argo-cd](), [deployment](), [gitops](), [governance](), [orchestration](), [platform-engineering](), [verification]() ### AI overview This article argues that Argo CD's manifest synchronization is only one part of enterprise software delivery. It describes how scaling GitOps can create operational toil and Argo sprawl, and proposes an enterprise control plane with workflow orchestration, governance, and deployment verification. ### Source excerpt Scaling GitOps? Argo CD is great for syncing manifests, but enterprise delivery requires workflow orchestration, governance, and AI verification. | Blog ## Platform Engineering in the Age of AI DevFeed: [Platform Engineering in the Age of AI]() Original publisher: [Read original article]() Author: Nicole Morgan Published: 2026-09-16T20:28:57.610955Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [Platform Engineering](), [Artificial Intelligence](), [AI Agent](), [internal developer portal](), [API](), [Deployment](), [sdlc]() Tags: [agent](), [ai](), [api](), [deployment](), [developer-experience](), [engineering](), [metrics](), [platform](), [sdlc]() ### AI overview This commentary examines how platform engineering is adapting as AI coding tools and agents become part of software delivery. It discusses the build-versus-provide decisions facing platform teams, how agents may consume internal developer platforms through APIs, the need for guardrails, and the challenge of measuring the results of AI investment. ### Source excerpt 94% of engineering leaders say their AI metrics are missing. Here's how platform engineering is changing to close that gap. | Blog ## AI Agent Governance: Why It Belongs in Your Platform DevFeed: [AI Agent Governance: Why It Belongs in Your Platform]() Original publisher: [Read original article]() Author: Prateek Mittal Published: 2026-09-16T20:28:57.610955Z Content type: article Language: en Sources: [Harness Blog]() Topics: [AI Agent](), [Artificial Intelligence](), [observability](), [audit](), [test](), [Deployment](), [Monitoring](), [pull-requests]() Tags: [ai](), [ai-agent](), [audit](), [deployment](), [governance](), [monitoring](), [observability](), [pull-requests](), [test]() ### AI overview Engineering leaders from Yelp, Platformable, and Harness argue that AI agent governance must be automated, continuously enforced, and built into the platform rather than left to policy documents. The article discusses audit trails, agent-to-agent access controls, experiment tracking, testing, latency monitoring, rollback paths, and observability for agent-driven changes. ### Source excerpt Engineering leaders from Yelp, Platformable, and Harness explain why AI agent governance has to be built into the platform, not a policy doc. | Blog ## Kubernetes Cost Management Tools: The Best Options 2026 DevFeed: [Kubernetes Cost Management Tools: The Best Options 2026]() Original publisher: [Read original article]() Author: Kelsey Rosen Published: 2026-09-16T00:00:00Z Content type: comparison Language: en Sources: [Harness Blog]() Topics: [Kubernetes](), [finops](), [Monitoring](), [Cloud]() Tags: [2026](), [cloud](), [compare](), [finops](), [kubernetes](), [monitoring]() ### AI overview A comparison of Kubernetes cost management tools for 2026, including Kubecost, OpenCost, and CloudZero. It explains how these tools allocate shared cloud node costs across namespaces, workloads, and pods, while accounting for idle and unallocated capacity and supporting optimization actions. ### Source excerpt Compare the best Kubernetes cost management tools for 2026, from Kubecost and OpenCost to CloudZero, on allocation depth, scale, and pricing model. | Blog ## Automate Docker Registry Creation with Harness and Terraform DevFeed: [Automate Docker Registry Creation with Harness and Terraform]() Original publisher: [Read original article]() Author: Shibam Dhar Published: 2026-09-16T00:00:00Z Content type: tutorial Language: en Sources: [Harness Blog]() Topics: [docker registry](), [Kubernetes](), [Provisioning](), [Terraform](), [Infrastructure as code](), [CI/CD](), [Dockerfile]() Tags: [ci-cd](), [container-image](), [deployment](), [docker-registry](), [infrastructure-as-code](), [kubernetes](), [registry](), [terraform]() ### AI overview A tutorial shows how to use Harness Pipelines and the Harness Terraform Provider to provision a uniquely named Docker Registry, build and push a container image, and deploy it to Kubernetes. It covers Terraform execution in a CI step, passing output variables between stages, and rolling updates with automatic rollback. ### Source excerpt Provision a fresh Docker Registry with Terraform, build your container image into it, and deploy to Kubernetes in one | Blog ## AI Security Governance: A Practical Framework for 2026 DevFeed: [AI Security Governance: A Practical Framework for 2026]() Original publisher: [Read original article]() Author: Christine Ferrusi Ross Published: 2026-09-15T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Security](), [Securing AI](), [ai-governance](), [Software Engineering]() Tags: [2026](), [ai](), [ai-security](), [governance](), [practical](), [security]() ### AI overview This article presents AI security governance as a structured program built on four pillars: policy, risk assessment, monitoring and audit, and accountability. It explains how these controls address untracked AI systems, unclear ownership, and missing records of automated actions, and discusses regulatory and organizational pressures driving adoption. ### Source excerpt Build an AI security governance framework covering policy, risk assessment, monitoring, and accountability, plus a risk register template to copy today. | Blog ## {unscripted} SF recap: do you trust your AI agents? DevFeed: [{unscripted} SF recap: do you trust your AI agents?]() Original publisher: [Read original article]() Author: Nick Durkin Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [AI Agent](), [Security](), [Code review]() Tags: [ai](), [ai-agents](), [blog](), [review](), [security]() ### AI overview A recap of {unscripted} 2026 in San Francisco examines trust, security, and adoption of AI agents in software delivery. It highlights guardrails, quality standards, regulatory visibility, and code review as important constraints on safely using AI. ### Source excerpt Key takeaways from {unscripted} SF: trust over speed, security teams falling behind attackers, and code review as the new AI bottleneck. | Blog ## Policy as Code in 2026: OPA, Kyverno, Cedar and What's Next DevFeed: [Policy as Code in 2026: OPA, Kyverno, Cedar and What's Next]() Original publisher: [Read original article]() Author: Abhijit Pujare Eric Minick Published: 2026-09-11T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [policy-as-code](), [Open Policy Agent](), [rego](), [Kyverno](), [Software Engineering](), [Kubernetes](), [JSON](), [YAML](), [AI Agent]() Tags: [ai-agent](), [compliance](), [json](), [kyverno](), [opa](), [open-policy-agent](), [policies](), [policy-as-code](), [rego](), [security](), [software-engineering](), [yaml]() ### AI overview This article surveys the 2026 Policy as Code ecosystem, comparing general-purpose Open Policy Agent and Rego with specialized approaches such as Kyverno, Cedar, and agent-oriented governance. It discusses the shift toward automated, machine-readable governance, the separation of policy from business logic, and the challenges of authoring and maintaining Rego as schemas evolve. ### Source excerpt | Blog ## Harness Named a Leader in SecureIQLab's August 2026 Cloud WAAP v5.0 Validation Report DevFeed: [Harness Named a Leader in SecureIQLab's August 2026 Cloud WAAP v5.0 Validation Report]() Original publisher: [Read original article]() Author: Christine Ferrusi Ross Published: 2026-09-11T00:00:00Z Content type: news Language: en Sources: [Harness Blog]() Topics: [Security](), [Cloud](), [API](), [Web](), [Testing]() Tags: [2026](), [ai-security](), [api](), [cloud](), [harness](), [protection](), [report](), [security](), [testing](), [v5](), [validation](), [web]() ### AI overview Harness Web Application & API Protection was named a Leader in SecureIQLab's August 2026 Cloud WAAP v5.0 CyberRisk Validation Comparative Report. The article highlights reported scores for API protection, advanced-threat coverage, deployment and management, false-positive avoidance, and GenAI and LLM operational efficiency. ### Source excerpt In the August 2026 SecureIQLab Cloud WAAP v5.0 CyberRisk Validation Comparative Report, Harness Web Application & API Protection (WAAP) was named a Leader. | Blog ## How AI Cost Management Agents Connect Cloud Spending to Engineering Workflows DevFeed: [How AI Cost Management Agents Connect Cloud Spending to Engineering Workflows]() Original publisher: [Read original article]() Author: Kelsey Rosen Published: 2026-09-11T00:00:00Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [cloud cost management](), [Artificial Intelligence](), [Cloud](), [Monitoring]() Tags: [agents](), [ai](), [cloud](), [cloud-cost-management](), [ec2](), [gpu](), [inference](), [kubernetes](), [llm](), [monitoring]() ### AI overview The article argues that engineers overlook cloud costs because spending data arrives too late and lacks the context needed for action. It explains how AI cost management agents can surface AI and cloud infrastructure spend in real time, flag waste, right-size resources, and enforce budget policies within engineering workflows. ### Source excerpt Engineers ignore cloud costs because of broken feedback loops, not apathy. Learn what AI cost management is, why AEO matters more than ever. | Blog ## Survey Finds AI Agent Confidence Outpaces Production Controls DevFeed: [Survey Finds AI Agent Confidence Outpaces Production Controls]() Original publisher: [Read original article]() Author: Keith Mann Published: 2026-09-10T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [AI Agent](), [Security](), [Testing](), [Tooling](), [Large Language Model](), [MCP]() Tags: [agents](), [ai](), [ai-agents](), [mcp](), [security](), [testing](), [tooling]() ### AI overview A survey of 700 organizations running AI agents found that confidence in testing, security, inventory, cost, and rollback ranged from 74% to 77%, while the controls supporting those claims were often absent. The largest gap was in security: 75% reported end-to-end confidence, but only 23% had a dedicated AI-agent security layer in production. ### Source excerpt A survey of 700 organizations reveals a dangerous gap between confidence in AI agents and the controls needed to test, secure, track, and roll them back. | Blog ## Run contained pen testing as chaos experiments securely DevFeed: [Run contained pen testing as chaos experiments securely]() Original publisher: [Read original article]() Author: Uma Mukkara Published: 2026-09-09T22:42:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Resilience](), [Security](), [Testing]() Tags: [chaos](), [permission](), [pipeline](), [production](), [resilience](), [security](), [testing](), [tool]() ### AI overview The article describes contained pen-testing experiments that run inside a release pipeline. Each experiment targets one service, one failure or intrusion condition, and one pipeline stage, producing an immutable audit record while avoiding broad production access. ### Source excerpt | Blog ## Harness CLI: AI Code Reviews in the Terminal DevFeed: [Harness CLI: AI Code Reviews in the Terminal]() Original publisher: [Read original article]() Author: Mohit Suman Published: 2026-09-09T00:00:00Z Content type: release Language: en Sources: [Harness Blog]() Topics: [Command-line interface](), [ai-coding](), [AI-assisted coding](), [Pull Request](), [CI/CD]() Tags: [agent](), [ai](), [ci-cd](), [cli](), [code-reviews](), [github]() ### AI overview This Harness article introduces Harness CLI 3.0, a terminal interface that unifies Harness Code, CI/CD pipelines, AI Code Reviews, and interactive terminal workflows. It describes a predictable grammar spanning more than 320 commands and 95 nouns, along with JSON output, self-describing schemas, agent detection, and HARNESS_API_KEY authentication for autonomous workflows. ### Source excerpt | Blog ## Making Operational Readiness Testing Continuous with Harness DevFeed: [Making Operational Readiness Testing Continuous with Harness]() Original publisher: [Read original article]() Author: Uma Mukkara Published: 2026-09-08T17:57:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Testing](), [Resilience](), [sdlc](), [Deployment](), [configuration]() Tags: [configuration](), [deployment](), [harness](), [resilience](), [sdlc](), [testing]() ### AI overview The article argues that Operational Readiness Testing should be continuous rather than a one-time pre-release checklist. It describes how Harness Resilience Testing can apply ongoing checks to services as dependencies, configuration, deployments, and operating conditions change. ### Source excerpt Harness makes Operational Readiness Testing continuous, applying resilience checks to every SDLC change. | Blog ## How engineering teams can measure AI coding ROI with cost attribution and outcome metrics DevFeed: [How engineering teams can measure AI coding ROI with cost attribution and outcome metrics]() Original publisher: [Read original article]() Author: Kelsey Rosen Published: 2026-09-08T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [ai-coding](), [Ground truth / benchmark quality](), [coding](), [Finance]() Tags: [ai](), [ai-coding](), [analysis](), [blog](), [coding](), [cost](), [datadog](), [engineering](), [governance](), [harness](), [incident](), [lifecycle](), [measurement](), [metrics](), [numbers](), [production](), [team](), [tokens](), [tooling](), [workflow]() ### AI overview A Harness panel discussion outlines ways engineering organizations can measure AI coding ROI. The panel recommends attributing costs to specific work, combining throughput metrics with qualitative evidence, and using governance and process changes to interpret results. ### Source excerpt Harness panelists share practical strategies for measuring AI coding ROI, from granular cost attribution and lifecycle metrics to budgeting, governance. | Blog ## Internal Developer Portals: Why Native CI/CD Drives Scale DevFeed: [Internal Developer Portals: Why Native CI/CD Drives Scale]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-09-08T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Platform Engineering](), [CI/CD](), [developer velocity](), [Automation](), [Scalability]() Tags: [automation](), [ci-cd](), [developer-velocity](), [idp](), [scalability](), [self-service](), [velocity]() ### AI overview This article argues that internal developer portals need native CI/CD integration to move beyond service catalogs and documentation. It explains that integrated pipelines can reduce context switching, support self-service workflows, help enforce standards, and improve developer velocity and scalability. ### Source excerpt Internal developer portals need native CI/CD integration to scale effectively. Learn how integrated pipelines improve velocity. Explore Harness IDP. | Blog ## Harness shipped 58 features in August 2026, including AI code review and agent security scanning DevFeed: [Harness shipped 58 features in August 2026, including AI code review and agent security scanning]() Original publisher: [Read original article]() Author: Chinmay Gaikwad Published: 2026-09-02T18:04:00Z Content type: release Language: en Sources: [Harness Blog]() Topics: [Artificial Intelligence](), [AI-assisted coding](), [AI Agent](), [Code review](), [prompt injection](), [Security](), [Terraform]() Tags: [2026](), [ai-code-review](), [code-review](), [coding-agents](), [opentofu](), [prompt-injection](), [security](), [terraform]() ### AI overview Harness describes 58 features released in August 2026, including an agent-scale code repository, AI Code Review, AI Risks scanning for prompt injection and tool poisoning in agent skills, and risk scoring for Terraform and OpenTofu changes. ### Source excerpt Harness shipped 58 features in August 2026: an agent-scale code repository, AI Code Review, AI Risks scanning, and the Blast Radius Agent. | Blog ## Catch AI Regressions Before They Ship with AI Evals in CI/CD DevFeed: [Catch AI Regressions Before They Ship with AI Evals in CI/CD]() Original publisher: [Read original article]() Author: Shibam Dhar Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [AI Agent](), [CI/CD](), [Testing](), [AI Development]() Tags: [agent](), [ai](), [ai-agent](), [ai-evals](), [ci-cd](), [datasets](), [production](), [quality](), [tests]() ### AI overview Harness AI Evals uses golden datasets, response-quality metrics, and blocking quality gates in CI/CD to catch AI agent regressions before production. In an e-commerce support-agent test, an early run passed about 65% of cases, below the 70% deployment threshold, revealing incorrect, missing, or incomplete answers. ### Source excerpt Harness AI Evals tests AI agent quality in CI/CD, using golden datasets and quality gates to catch behavioral regressions before production. | Blog ## Building Trust in AI DevOps: Validating the Harness Knowledge Graph DevFeed: [Building Trust in AI DevOps: Validating the Harness Knowledge Graph]() Original publisher: [Read original article]() Author: Vikram Sahu Published: 2026-08-31T18:37:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [DevOps](), [Testing](), [Graphs](), [Artificial Intelligence](), [Software]() Tags: [ai](), [ai-evals](), [api](), [automated](), [data](), [devops](), [evals](), [graph](), [knowledge-graph](), [lifecycle](), [operational](), [other](), [pipeline](), [schema](), [sdlc](), [security](), [services](), [software](), [software-delivery](), [validation]() ### AI overview This article explains how Harness validates answers from its SDLC Knowledge Graph. Its multi-layered approach combines AI evaluations, schema traversal, API checks, direct product verification, production data, and shift-left testing to improve reliability. ### Source excerpt Discover our multi-layered validation approach combining AI evals to ensure reliable AI-powered software delivery insights. | Blog ## Introducing Agent-Ready Code Repository & AI Code Review DevFeed: [Introducing Agent-Ready Code Repository & AI Code Review]() Original publisher: [Read original article]() Author: Juveria Kanodia Colin Chartier Published: 2026-08-27T00:00:00Z Content type: release Language: en Sources: [Harness Blog]() Topics: [Artificial Intelligence](), [AI-assisted coding](), [Pull Request](), [Code review]() Tags: [ai](), [ai-agents](), [ai-code-review](), [code-generation](), [code-review](), [software-delivery]() ### AI overview Harness introduces an agent-ready Code Repository and built-in AI Code Review to manage AI-generated code at high volume. The capabilities use risk-based diffs and scoped agent permissions to support governed software delivery before code merges. ### Source excerpt Legacy SCMs can't handle agent-scale code volume. Learn how Harness Code Repository and built-in AI Code Review handle AI-generated code at scale using risk-bas | Blog ## Harness Cloud pricing update: lower per-minute rates DevFeed: [Harness Cloud pricing update: lower per-minute rates]() Original publisher: [Read original article]() Author: Nofar Bluestein Published: 2026-08-27T00:00:00Z Content type: release Language: en Sources: [Harness Blog]() Topics: [Cloud](), [Hardware](), [Linux](), [macOS]() Tags: [2026](), [apple](), [cloud](), [hardware](), [linux](), [macos](), [pricing](), [update]() ### AI overview Harness is lowering per-minute pricing for most Harness Cloud resource classes effective September 1, 2026. The update adds Apple M4 macOS hardware, smaller Linux tiers, and price reductions for macOS, Linux, and Windows, while the Linux 8-core medium rate increases for some accounts. ### Source excerpt See the September 1, 2026 Harness Cloud pricing updates, featuring lower per-minute rates, new Apple M4 macOS hardware, and new, smaller Linux resource classes. | Blog ## Developer Self-Service Pipelines with Harness IDP DevFeed: [Developer Self-Service Pipelines with Harness IDP]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-08-26T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [CI/CD](), [Deployment](), [Provisioning](), [Microservice]() Tags: [ci-cd](), [deployment](), [developer](), [idp](), [platform](), [provisioning](), [self-service]() ### AI overview This article explains how platform teams can connect Harness IDP self-service workflows to CI/CD and deployment pipelines. It covers triggering deployments, provisioning infrastructure, and managing promotion logic while preserving governance and operational consistency. ### Source excerpt Connect developer self-service to production with Harness IDP's pipeline integration. Automate deployments and boost velocity. Learn more. | Blog ## Internal Developer Platform Golden Paths Guide DevFeed: [Internal Developer Platform Golden Paths Guide]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-08-25T00:00:00Z Content type: tutorial Language: en Sources: [Harness Blog]() Topics: [internal developer platform](), [Platform Engineering](), [Developer Platform](), [Template]() Tags: [catalog](), [guide](), [internal-developer-platform](), [platform-engineering](), [productivity](), [self-service](), [visibility](), [workflows]() ### AI overview This guide explains how platform engineers can evolve an internal developer platform from a basic service catalog into maintained golden paths. It describes opinionated workflows, self-service capabilities, and embedded operational practices intended to improve developer adoption, speed, and reliability. ### Source excerpt Transform your service catalog into golden paths that developers love. Build an IDP that boosts productivity. Learn more. | Blog ## Automated Incident Response: Nobody Should Be the Scribe DevFeed: [Automated Incident Response: Nobody Should Be the Scribe]() Original publisher: [Read original article]() Author: Ryan Taylor Published: 2026-08-25T00:00:00Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [incident](), [Incident response](), [Artificial Intelligence](), [Slack](), [Python](), [Shell]() Tags: [agent](), [ai](), [automated-incident-response](), [blog](), [harness](), [incident](), [incident-response](), [jira](), [product](), [python](), [shell-script](), [slack](), [teams]() ### AI overview A Harness product lead argues that incident teams should not rely on a human scribe. The article describes automated runbooks that create communication channels, video bridges, and tickets, while an AI Scribe Agent captures incident events and produces timelines, postmortems, and synchronized action items. ### Source excerpt A Harness product lead on why humans shouldn't be the status-tracking layer during incidents, and how automated summaries and postmortems replace the scribe. | Blog [Next page]()