Skip to main content

Posts

Factory Raises $200M as It Builds Agents Across the Software Lifecycle

Enterprise coding agent startup Factory announced it has raised $200 million at a $5 billion valuation, more than tripling its valuation from its last funding round five months ago. Founded in 2023, Factory develops AI agents for software engineering teams. Its platform is designed for work across the full software development lifecycle, including building, testing and maintaining applications. The company says its customers include Nvidia, Adobe, Palo Alto Networks, T-Mobile, and Blackstone. As AI coding startups proliferate, Factory is trying to differentiate itself by taking agents beyond discrete coding tasks and into coordinated software development workflows. In June, the company introduced Factory 2.0, which it describes as a “software factory” that brings tasks such as code review, security analysis, documentation, quality assurance and incident response onto a common agent platform. The platform also supports cloud, self-hosted and fully air-gapped deployments, which could ...
Post a Comment
Read more
Recent posts

LocalStack Acquires WonderTwin AI to Gain SaaS App Emulation Platform

LocalStack this week revealed it has acquired WonderTwin AI , a provider of an emulator of software-as-a-service (SaaS) applications that is used to build custom applications for those platforms. Colin Neagle, vice president of marketing for LocalStack, said the emulators WonderTwin AI has developed will be integrated into the company’s namesake emulation platform that application development teams currently rely on to emulate cloud services provided by Amazon Web Services (AWS). LocalStack and WonderTwin AI make it possible for application developers working on a local machine to build applications that are designed to be deployed on some type of external cloud platform using a local sandbox to test and validate integrations without having to connect to a service or build against a live application programming interface (API). That issue has been especially critical in an era where more code will soon be generated by AI coding agents that may for one reason or another circumvent the...
Post a Comment
Read more

Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence

Security teams have spent the past few months watching frontier AI models surface vulnerabilities faster than most organizations can patch them. Oracle’s answer, at least for the world’s most widely deployed programming language, is to change how often it ships fixes — and to get ahead of a threat most enterprises haven’t started planning for yet. Java 27, released September 15, moves Oracle toward monthly critical security patch updates alongside its existing quarterly cycle. It also delivers the platform’s biggest cryptography milestone in years: post-quantum hybrid key exchange for TLS 1.3, built to protect data now from being decrypted later once quantum computers catch up. “Java 27 continues that proud tradition by providing a stable foundation for today’s enterprise workloads and innovative AI and post-quantum cryptography capabilities,” said Georges Saab, senior vice president of Oracle Java Platform and chair of the OpenJDK governing b...
Post a Comment
Read more

Stop Chasing 100% Test Coverage: Why DevOps Teams Need to Test Smarter, Not More

Every software team eventually runs into the same question: How much testing is enough? For years, the default answer has been “more.” More automated tests. More regression suites. More environments. More devices. But as applications become more complex and release cycles continue to accelerate, testing everything simply isn’t realistic, even with the support of AI. Modern software is built on microservices, third-party APIs, cloud infrastructure and code that is constantly changing. Teams are expected to release faster while maintaining quality, security and reliability. The challenge isn’t a lack of commitment to testing; it’s that time and resources are finite. Instead of asking, “How much testing is enough?” we need to determine “What should we test first?” The answer starts with understanding risk. Not Every Bug Carries the Same Risk One of the biggest mistakes organizations make is treating every bug as equally important. A typ...
Post a Comment
Read more

Hybrid Software Development: Benefits and Challenges

Fortunately, companies do not always have to choose between in-house vs outsourcing . Instead they can adopt a hybrid development strategy, which combines the capacities of internal and external IT teams. This approach allows companies to capitalize on the strengths of both traditional software development models, while offsetting their respective limitations, thereby streamlining project execution. However, to leverage a hybrid model successfully, companies must be prepared to tackle the operational complexities that arise when internal and external teams work together. This article explores why companies adopt a hybrid development model, outlines its key challenges, and provides recommendations to address them. Why Businesses Choose a Hybrid Software Development Model Even proficient internal development teams can face challenges delivering new software projects end-to-end. For instance, a team can have sufficient proficiency to handle the majority of frontend and backend developm...
Post a Comment
Read more

Ten Great DevOps Job Opportunities

DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of available DevOps talent is still relatively constrained, so when one DevOps professional takes on a new role, it tends to create opportunities for others. The ten job postings shared this week are selected based on the company looking to hire, the vertical industry segment and naturally, the pay scale being offered. We’re also committed to providing additional insights into the state of the DevOps job market. In the meantime, for your consideration. Dice Booz Allen Hamilton McLean, VA DevOps Engineer $77,600 to $176,000 Alarm.com Centennial, CO DevOps Engineer $120,000 to $130,000 HarbourVest Partners Boston, MA DevOps Engineer $135,00...
Post a Comment
Read more

GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing

GitLab administrators got an unwelcome reminder this week that a single API endpoint can undo years of access control work. On September 10, GitLab shipped a critical patch release — versions 19.3.2, 19.2.6 and 19.1.8 — to fix 18 security vulnerabilities, two of them rated critical. One of those two is about as bad as a vulnerability gets: an unauthenticated attacker can read arbitrary files off a self-managed GitLab server without so much as a login attempt. That flaw, tracked as CVE-2026-85706, lives in GitLab’s repository commits API. GitLab describes it as improper path confinement combined with missing authentication enforcement on the endpoint. In practice, that means someone outside the organization, with no credentials, could send a crafted request and pull back files that should never leave the server: configuration files, tokens, SSH keys, database credentials. GitLab gave it a CVSS score of 10.0, the maximum on the scale, because it requires no authentication and very ...
Post a Comment
Read more