Security is strengthened by Platform Engineering

Survey respondents confirm built-in security and compliance are delivered by self-service platforms, along with efficiency and increased developer productivity.

  • Thursday, 21st March 2024 Posted 2 years ago in by Phil Alsop

Puppet by Perforce has published the findings of the global 2024 State of DevOps Report: The Evolution of Platform Engineering. This report follows the continued maturity of platform engineering, with 43% of respondents reporting they have had a platform team for at least 3-5 years.

Since 2012, the annual State of DevOps Report produced by Puppet has reported on trends that impact DevOps success. In 2023, Puppet shifted the report's focus to a trend in the space: platform engineering. Conducting an annual survey from around 500 individuals all working with or on a platform team, the 2024 report focuses on how platform engineering delivers efficiency, speed, and security to DevOps.

Key findings include:

Security is being built into the foundation of platform engineering, with far-reaching benefits for organizations who understand that Security is priority one.

43% of respondents say that their platform has a dedicated security and compliance team, highlighting the importance of proactive security management.

Most respondents report that the platform team has helped their company become more compliant.

51% of respondents say that platform teams are also responsible for enforcing software and tool versions for security updates.

Standardized automation unlocks the full potential of DevOps.

Organizations report an average of 3 self-service platforms operating internally, indicating expansion and maturity since last year's report.

"Automation," "productivity," and "standardized processes" are cited as the three top use cases that platform engineering helps solve.

66% report that automating workflows and processes "is in scope" for their growing platform engineering teams.

It's critical that developers are supported by the platform engineering team to do their best work. 

52% say that a product manager is crucial to the success of the platform team.

Respondents cite "increased productivity," "better quality of software," and "reduced lead time for deployment" as the top benefits that the platform team has delivered for developers.

65% of respondents report that the platform team is important and will receive continued investment.

"With the expanded scope of platform engineering, we're seeing security become a critical component of platforms from the start," said Kapil Tandon, VP of Product Management at Puppet by Perforce. "Security is everyone's responsibility, but it's notable that platform engineering has become a larger part of this critical work."

As the number of self-service platforms increase, the report also shows that most functions have moved onto a platform of their own — especially the security function "Platform engineering continues to enhance DevOps, and we are now seeing the impact on security and productivity." Tandon continues. 

AI trust fails to keep pace with rate of adoption

Posted 1 day ago by Phil Alsop
Two thirds of organisations (64 per cent) are actively using artificial intelligence across the UK, a 12 per cent increase from last year according...

AI adoption is accelerating identity sprawl

Posted 1 day ago by Phil Alsop
Keeper Security has released its latest global insight report, “Identity Security at Machine Speed.”

Surge in AI-enabled cybercrime

Posted 1 day ago by Phil Alsop
Fortinet leverages threat intelligence to disrupt global cybercrime, transforming awareness into actionable insights.
Study finds most organizations recognize the need for connected data, content, and workflows, but few have built the operational foundation required...
A third (35%) of European organisations cannot say whether they have been hit by an AI-powered cyberattack, according to the latest AI Pulse Poll...
Nearly half of European organisations spend up to €5 million a year on cloud – yet a quarter of capacity sits idle.

AI-Driven attacks reshape the MSP threat landscape

Posted 6 days ago by Phil Alsop
New research shows session hijacking surging 23%, ransomware up 190%, and non-human identities outnumbering users 25:1 as AI accelerates attacks...
Lenovo research highlights a growing AI execution gap as organizations struggle to control and operate AI across their environments.