# Policy Management Published articles for Policy Management. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Nirmata's Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost DevFeed: [Nirmata's Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost]() Original publisher: [Read original article]() Author: Anubhav Sharma Published: 2026-08-12T20:52:35Z Content type: article Language: en Sources: [Nirmata]() Topics: [Kubernetes](), [Cloud](), [Automation](), [data]() Tags: [agents](), [ai](), [automation](), [cloud](), [cloud-native](), [clusters](), [cncf](), [compute](), [cost-savings](), [deployment](), [devsecops](), [kubernetes](), [kyverno](), [policy-management](), [resource](), [verification]() ### AI overview Nirmata describes applying its Cost Analyzer and Resource Hygiene Cloud Agents across an enterprise customer's 40-cluster production Kubernetes fleet. The scans identified a roughly $107,000 monthly compute baseline and about 50% recoverable through right-sizing before stale-resource cleanup, while revealing recurring sources of waste and governance gaps. ### Source excerpt Nirmata's Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost Most Kubernetes Cost overruns don't come from one singularly bad decision. They come from dozens of reasonable ones -- made independently, by different teams, at different times -- that... The post Nirmata's Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost first appeared on Nirmata. ## AI governance gaps leave developer and agent access to AI tools insufficiently controlled DevFeed: [AI governance gaps leave developer and agent access to AI tools insufficiently controlled]() Original publisher: [Read original article]() Author: Anubhav Sharma Published: 2026-08-05T01:56:41Z Content type: opinion Language: en Sources: [Nirmata]() Topics: [ai-governance](), [Security](), [Access Control](), [Authorization](), [developer-productivity](), [Monitoring](), [Large Language Model]() Tags: [access-control](), [ai](), [ai-governance](), [cloud-native](), [cncf](), [developer](), [devsecops](), [engineering](), [kubernetes](), [kyverno](), [llms](), [policy-management](), [risk-management](), [security](), [visibility]() ### AI overview The article presents aggregated responses from security leaders about AI governance in fast-moving engineering organizations. It identifies gaps in centralized access control, policy enforcement, session auditing, real-time visibility, and protection against exposing permissions or environment variables to LLMs. ### Source excerpt Three Questions We Asked About AI Governance -- And What the Answers Reveal Over the past few months, we've been having the same conversation on repeat with security leaders about AI at fast-moving engineering organizations. Different companies, different tech stacks, same three questions -- and,... The post The AI Innovation-Security Paradox first appeared on Nirmata. ## Critical Kyverno Vulnerability -- CVE-2026-54523 DevFeed: [Critical Kyverno Vulnerability -- CVE-2026-54523]() Original publisher: [Read original article]() Author: Anubhav Sharma Published: 2026-07-29T01:08:41Z Content type: news Language: en Sources: [Nirmata]() Topics: [Kyverno](), [vulnerability](), [Exploit](), [Kubernetes](), [Cloud Native Ecosystem]() Tags: [2026](), [admission-controller](), [ai](), [cloud-native](), [cloud-native-ecosystem](), [cncf](), [cve](), [devsecops](), [engineering](), [kubernetes](), [kyverno](), [nctl-ai](), [platform-engineering](), [policy](), [policy-as-code](), [policy-management](), [release](), [upgrade](), [vulnerability]() ### AI overview The article reports CVE-2026-54523, a critical Kyverno vulnerability affecting versions 1.18.0 and 1.18.1. A tenant able to create a NamespacedMutatingPolicy could bypass namespace isolation and generate resources in other namespaces, potentially enabling cluster-wide privilege escalation. Kyverno 1.18.2 patches the vulnerability. ### Source excerpt Critical Kyverno Vulnerability -- CVE-2026-54523 On July 13, 2026, a critical vulnerability was disclosed in Kyverno, the Kubernetes-native policy engine used broadly across the cloud native ecosystem for policy-as-code enforcement. The vulnerability, tracked as CVE-2026-54523 (GHSA-79gf-7frw-68m9), allows a tenant with permission to create a NamespacedMutatingPolicy... The post Critical Kyverno Vulnerability -- CVE-2026-54523 first appeared on Nirmata. ## What's new in the Redpanda Agentic Data Plane DevFeed: [What's new in the Redpanda Agentic Data Plane]() Original publisher: [Read original article]() Author: Marc Millstone Published: 2026-06-16T00:00:00Z Content type: article Language: en Sources: [Redpanda]() Topics: [Artificial Intelligence](), [Amazon Bedrock](), [Amazon Web Services (AWS)](), [AI Strategy](), [Model Context Protocol](), [observability](), [Cloud]() Tags: [agentic-ai](), [ai](), [announcement](), [aws](), [enterprise](), [governance](), [mcp](), [observability](), [platform](), [policy-management](), [production]() ### AI overview Redpanda announces the general availability of its Agentic Data Plane on AWS. The managed service unifies AI models, agents, and MCP-connected data sources with governance controls intended to help enterprises deploy agentic applications safely at scale. ### Source excerpt Redpanda Agentic Data Plane is now generally available on AWS. Deploy governed, enterprise-scale, agentic AI across all your data, safely.