DevOps Dozen 2023 Finalists - Public Voting Welcome to the DevOps Dozen² Awards 2023 nominations. For nine years, we have been honoring the most outstanding leaders in the DevOps community. The DevOps Dozen² Awards include two categories: DevOps Dozen² Community Awards DevOps Dozen² Tools and Services Awards Public voting is now open until December 31, 2023. Winners will be announced at the Predict 2024 Virtual Summit on January 18, 2024. Please help by following a few rules:1. One person, one vote. Please don't try to stuff the ballot box. 2. One vote per IP address (see rule 1).3. We reserve the right to disqualify any person or entity that is abusing the spirit of the DevOps Dozen Awards² program.4. You do not have to vote in every category, but we hope you will.You can find out more about the DevOps Dozen² Awards and full descriptions of each category at devopsdozen.com. Thanks for helping us pick the best of the best in DevOps! Community Awards Question Title * 1. Best DevOps Industry Implementation"This award honors organizations that have successfully adopted and implemented DevOps principles and practices." Codacy Pioneers Program (Codacy's Pioneers Programme): Codacy Pioneers is a program for individuals involved in creating, maintaining and contributing to open source code. DevOps Implementation across the SJP enterprise systems (St James's Place in Partnership with Intellect Design Arena): We embraced a transformative DevOps journey to enhance operations, resolving complex challenges with innovative solutions. Our efforts resulted in a comprehensive digital solution, revolutionizing our processes and adhering to best practices. Through the integration of feature branching, automated unit testing, and Pipelines, we efficiently managed Salesforce's intricacies, ensuring smooth deployments, strong automation, and thorough monitoring. Question Title * 2. Best DevOps Survey/Analysis/Research"This award recognizes research that has significantly and positively impacted the DevOps community." State of Digital Quality Report 2023 (Applause): While organizations may have measures and staff in place to assess the quality of their apps, devices and digital experiences, their customers ultimately determine whether the functionality and user experiences are good enough, or leave something to be desired. Applause's State of Digital Quality report looks at quality practices, bugs and device coverage across different industries and testing solutions. The Shift to a Security Approach for the Full Application Stack Report (Cisco AppDynamics): The report highlights technologists' challenges as they manage application security across a dynamic IT environment. Accelerate State of DevOps Report (DORA): Accelerate State of DevOps Report summarizes multi-year, platform-agnostic, rigorous research into the cultural, process, and technical capabilities that predict performance in technology-driven organizations. Healthy cultures, user-centric approaches, and high-quality documentation positively impact an organization's overall performance. DORA's software delivery metrics are an industry standard and the framework helps organizations identify improvement areas and create sustainable success. Charting Observability Research Report (Edge Delta): We've long understood that observability data is growing. However, no vendor has provided concrete research into the topic. At Edge Delta, we're solving the challenges of monitoring large-scale datasets. We built the Charting Observability 2023 report to help DevOps teams understand the impact of data growth at a deeper level. In the report, we quantify how much data has grown and provide evidence as to how teams are responding, from DevOps engineers to executive leadership. 2023 State of IaC Report (Firefly): This report summarizes research from surveying 300 cloud users. It helps readers understand how they compare to others in terms of multi-cloud infrastructure, infrastructure as code, and cloud management practices and tools. Observability Survey 2023 (Grafana Labs): Grafana Labs' Observability Survey 2023 provides insight into where the industry is today and where it's headed. Using data from hundreds of participants, the report explores where companies are in their adoption journey, the challenges they face, and the benefits of moving to centralized observability. The report also goes a layer deeper by conducting in-depth interviews with Grafana Labs customers to dig into the real impact observability has had on their organizations. 2023 Software Artifact State of the Union (JFrog): JFrog's Software Artifact State of the Union exposes the packages and binaries most in use by enterprise developers today to deliver software from design to production. Key findings indicate an intense and growing interest in emerging memory-safe programming languages for securing the software supply chain; a rise in designing for the edge; plus exponential artifact size and container usage hinting at development of applications such as cryptocurrency, metaverse, and blockchain. What's in Your Open-Source Software (Lineaje): Lineaje's report titled What's in Your Open-Source Software? compiled by the company's research arm, Lineaje Data Labs, is a data-driven analysis into the integrity and risk of open-source software (OSS), which now constitutes the majority of all software. Using the acclaimed Apache Software Foundation as the gold standard of open-source software, the report uncovers the inherent risk and ease of software supply chain tampers in its most popular products and dependencies. 2023 Software Engineering Benchmarks Report (LinearB): In October 2023, LinearB released the 2023 Software Engineering Benchmarks Report, offering an in-depth analysis of industry benchmarks for key operational metrics (like DORA) as well as resource and investment metrics“showcasing how elite engineering organizations of all sizes operate. The report provides insights and data from a study of more than 3.6 million pull requests (PRs) from 2,000+ development teams made up of 100,000+ developers across 64 countries. 2023 Observability Forecast Report (New Relic): Once again the industry's largest and the only study to open-source its raw data, New Relic's third annual Observability Forecast examines the evolution and impact of observability. The report reveals that observability adoption is on the rise and full-stack observability leads to better service-level metrics "like fewer, shorter outages and lower outage costs”and shows that respondents receive a median 2x ROI in observability, with 41% receiving more than $1 million in total annual value. State of the API Report (Postman): Postman's State of the API Report provides the largest and most comprehensive overview of API usage in the world. It surveys over 40,000 API professionals, including developers, product managers, and C-level executives. They use the findings to make decisions on investment in API tooling, staffing, and best practices. The Report is also used by tech-sector analysts including Goldman Sachs to appraise the competitive landscape of API solutions and gauge the growth of new API technologies. Global State of API Security Report (Traceable AI): Despite APIs being critical to the modern enterprise, until now, there has not been an extensive, global study offering a panoramic view of the API security landscape. Traceable believed that it was time to fill this gap and embarked on this research journey with the Ponemon Institute. Engaging 1,629 cybersecurity experts across the United States, the United Kingdom, and EMEA, this study highlights the dark reality of API-related data breaches and their impact on organizations. Question Title * 3. Best DevOps Related Video Series (Video)"This category highlights the most entertaining, educational and inspirational DevOps video series—those with the most engaging and highest-quality content." DevOps Exchange YouTube Channel (DevOps Exchange): The DevOps Exchange YouTube channel is an educational powerhouse featuring insights from top experts within the DevOps community. It's evolved into a visionary platform, providing valuable content from over 170 technical videos, with 3-4 monthly uploads. It covers diverse topics and features tutorials and expert interviews and fosters a sense of community and innovation. The series is not just informative; it's a driving force behind DevOps progress, innovation, and collaboration. DevOps Toolkit (DevOps Toolkit): New videos are typically released on Mondays, and it's a great way to start the work week. Every video offers a fresh perspective. And the hosts put enough effort into making each video. Not only is the content great, but so is the production quality. The dialogue and Q/A in the comments makes the community engagement apparent. KubeSimplify (Kubesimplify): Cloud native series. Saiyam Pathak (Kubesimplify): DevOps Workshop series. Ned in the Cloud's Terraform Tuesday Series (Ned Bellevance): Every Tuesday, Ned in the Cloud publishes a video with helpful advice for using infrastructure as code to create, deploy, and manage the cloud infrastructure upon which your cloud native apps depend. Ned simplifies complex ideas and offers pragmatic advice. Question Title * 4. Best DevOps-Related Podcast Series (Audio Only)"Which is your favorite DevOps podcast series this year? Check out the series nominated below. Maybe you'll pick up a new favorite to listen to!" The Modern Mainframe (BMC Software): Featuring lively, thoughtful discussions with executives, product managers, industry analysts, and DevOps evangelists, The Modern Mainframe podcast covers DevOps topics across the mainframe, including application development, operations, database DevOps, and more. 0800-DEVOPS Podcast by Ivan Krnic (CROZ): This outstanding podcast series has consistently raised the bar for DevOps discussions, offering a unique platform for industry insights, expert interviews, and in-depth exploration of emerging trends. "0800-DEVOPS" is more than just a podcast; it's a beacon of knowledge and a hub for the DevOps community. Ivan Krnic's dedication to the craft of DevOps shines through in every episode, making it a must-listen for professionals and enthusiasts alike. DevOps Paradox (DevOps Paradox): The "DevOps Paradox" podcast is among the best technology-related podcasts. It gives the audience several new perspectives with the right amount of breadth and depth. It is my go-to source for analysis of technology topics. Let's Get To The News (Kubernetes community): Craig Box founded the Kubernetes Podcast and hosted it until he left Google in 2022. He has now taken his inimitable voice to his own podcast, "Let's Get To The News: a Kubernetes and cloud native podcast", which launched with the release of Kubernetes 1.28. Dev Interrupted (LinearB): Dev Interrupted is a weekly podcast made exclusively for software engineering leaders. Hosts Dan Lines and Conor Bronsdon invite expert guests from around the world to explore strategy and day-to-day topics ranging from dev team metrics to accelerating delivery. The podcast is known for its informative and engaging conversations and practical advice for engineering leaders. DevOps in Agile Way Podcast (Pawel Piwosz, DevOps Institute Ambassador): Pawel's podcast, DevOps in Agile Way, launched in July 2023 and has covered topics including the DevOps CALMS framework, The Three Ways, cloud vendor lock-in, incident management in AWS, tools, automation, and culture in AWS. The MLSecOps Podcast (Protect AI): MLSecOps is the evolution of DevSecOps. Securing AI and ML is critically important, but a nascent discipline within DevOps that lacks awareness and resources. The MLSecOps Podcast is addressing this problem with insights from high profile experts from industry and government agencies tasked with AI/ML protection. Each episode explores the world of machine learning security including how to prevent attacks, navigate new AI regulations, model provenance, supply chain vulnerabilities, trusted AI and more. Question Title * 5. Best DevOps Book / eBook of the Year"Each year sees a plethora of well-crafted DevOps-related books and eBooks. This category highlights the most popular and best read of the year." Crafting a Mainframe Modernization Roadmap (Broadcom): With DevOps offering mainframe teams an array of modernization opportunities, the possibilities can be overwhelming. To help DevOps leaders and mainframe leaders plan a journey that's both mutually beneficial and achievable, this eBook offers a useful assessment framework. Within Return on Investment and Level of Effort, the featured use cases are further prioritized in terms of outcomes. By clearly communicating their roadmaps, teams achieve cross-functional buy-in and elevate team morale. Strategizing Continuous Delivery in the Cloud (Garima Bajpai , Thomas Schuetz): The book covers important topics related to DevOps strategies for CI/CD. The main area of interest is Cloud. It is important to select proper approach, as Cloud has specific rulkes which needs to be applied. Redbook: Accelerate Mainframe Application Modernization with Hybrid Cloud (IBM): What is the best strategy to an effective digital transformation of your business? How do you make your business more agile, productive, and less siloed so that you can provide engaging customer experiences rapidly and at lower costs? This Redbook helps enterprises organize and plan an effective mainframe modernization path, with recommendations for processes and tools that can assist. Industrial DevOps: Build Better Systems Faster by Dr. Suzette Johnson and Robin Yeman (IT Revolution Press): Applying the theory, practice, and learnings from Agile and DevOps as it has been applied in the software community, has the potential to dramatically improve the development and delivery of cyber-physical systems. Companies that solve this problem will increase transparency, reduce cycle time, increase value for money, and innovate faster. Simply, they will build better systems faster, and they will become the ultimate economic and value delivery winners in the marketplace. Beyond Agile Auditing: Three Core Components to Revolutionize Your Internal Audit Practices (IT Revolution): "Beyond Agile Auditing" revolutionizes internal audit, drawing from DevOps to transform auditor-client relations into collaborative partnerships. Authored by Clarissa Lucas, a seasoned auditing expert, the book dismantles traditional adversarial silos, paving the way for mutual success, faster results, and a strategic edge. Lucas enriches her guide with practical insights from varied case studies, making a solid case for the book's nomination as the best in DevOps. Question Title * 6. Top DevOps Evangelist"This category is one of our favorites. There are so many great evangelists who spread the DevOps gospel, but we want to know who does it best. Nominees can work within the DevOps space or outside of it. This is always a really competitive category." Sam Dion (National Bank of Canada): Sam epitomizes a next gen mainframer. While at Dejardins, Sam actively promoted a modern mainframe development environment and invested in the adoption of a VS Code-based UX and integrating Github for mainframe appdev. Sam rallied these approaches as an attractive hiring incentive to new mainframe candidates. Sam also eagerly promoted this approach publicly. Sam's enthusiasm for the mainframe is infectious and we are in great hands with young advocates like Sam. Garima Bajpai (Canada DevOps Community of Practice): Garima is thought leader in DevOps & Cloud technologies. She is the founder of DevOps Community of Practice, Canada. She leads the ambassador program for Continuous Delivery Foundation. Some might know her as a course contributor and instructor for various DevOps courses from leading certification bodies. She has over two decades of experience leading large-scale R&D with a variety of teams and has helped them adapt DevOps to increase team productivity. Pawel Piwosz (Company or Community: DevOps Institute Ambassador): Pawel Piwosz is an outstanding DevOps Institute Ambassador and DevOps evangelist. He is a developer advocate at cloud-native CICD platform Spacelift and is hugely knowledgeable on all things DevOps. He is an outstanding speaker and generous with his time, contributing to many DevOps Institute activities such as our SKILup Sessions and SKILup Days, and has his own podcast, DevOps in Agile Way. Amanda Lewis (DORA Community): Amanda Lewis is a community leader, author, and keynote speaker. Amanda leads the DORA.community, a community focused on learning, discussing, and collaborating on software delivery and operational performance. Thousands of practitioners, leaders, and researchers collaborating via a mailing list, 20+ community meetings, and the inaugural DORA Community Summit. Amanda co-authored this year's Accelerate State of DevOps Report and regularly inspires the community at local and global conferences. Fatima Sarah Khalid (GitLab): Fatima Sarah Khalid is a Developer Evangelist at GitLab, and passionate about building more inclusive tech communities. Her keynote talk on allyship, The Power in the Choices We Have earned her two prestigious invitations in 2023. She was invited to keynote the Open Source Summit EU, the premier event for more than 2,000 open source technologists, alongside leaders from Amazon, Fujitsu, and Google. Fatima also led the keynote at All Things Open, one of the largest open source events in the US. Ayelet Sachto (Google): Ayelet is a passionate DevOps evangelist with a deep understanding of DevOps principles. She is a highly skilled engineer with more than 20 years experience. She is an effective mentor, sharing her knowledge and experience with others. Ayelet is committed to making DevOps more accessible to everyone. She has made significant contributions to the DevOps community by providing tools and resources to help underrepresented communities get their voice heard and feel more included. Richi Hartmann (Grafana Labs): Richard "RichiH" Hartmann is the Director of Community at Grafana Labs, a member of the Office of the CTO of Grafana Labs, Prometheus team member, OpenMetrics founder, OpenTelemetry member, CNCF Technical Oversight Committee member, CNCF Governing Board member, and more. He also leads, organizes, or helps run various conferences from hundreds to 18,000 attendees, including KubeCon, PromCon, FOSDEM, DENOG, DebConf, and Chaos Communication Congress. Stephen Chin (JFrog): Stephen Chin is VP of Developer Relations at JFrog, chair of the CDF governing board, member of the CNCF governing board, and author of The Definitive Guide to Modern Client Development, Raspberry Pi with Java, Pro JavaFX Platform, and the upcoming DevOps Tools for Java Developers title from O'Reilly. He has keynoted numerous conferences around the world including swampUP, Devoxx, JNation, JavaOne, Joker, Open Source India and most recently DevOps Tools for Java Developers. Eran Kinsbruner (Lightrun): Eran Kinsbruner is a developer advocate and evangelist, author of 4 award winning books, and a continuous publisher of articles most recently focused on Developer Observability, dynamic instrumentation and production debugging. Eran has been writing for the top media publications including The NewStack, Dzone, Medium, Forbes Council, and many others and is a constant keynote speaker across technology events. Mayank Solanki (TataCliq): In the ever-evolving landscape of cloud technology, individuals like Mayank Solanki shine as beacons of innovation and efficiency. Mayank, a seasoned DevOps expert, has achieved the remarkable feat of optimizing cloud costs by a staggering $2 million in just one year. His story is not only a testament to the power of DevOps practices but also an inspiration for organizations seeking to maximize efficiency while minimizing expenditure. Viktor Farcic: Viktor Farcic continues to be one of the most respected DevOps evangelists. His content is A go-to source on new tools, technologies, and patterns. He always provides cutting edge technology insights and fair assessments of products. He is always approachable and keeps an open door for the community. Question Title * 7. Best DevOps Transformation (Non-Vendor)"Which organizations stood out in their efforts to transform their business through DevOps?" Informatica (Grafana Labs): Over the past 4 years, Informatica's observability journey has undergone significant improvements and the switch from Grafana OSS to Grafana Enterprise has been at the center of this evolution. They rely on Grafana for a "single source of truth" to manage their multi-cloud infrastructure, including hundreds of VMs and Kubernetes clusters. With 300 active monthly users and over 1,200 dashboards in use, Grafana Enterprise plays an instrumental role at Informatica, even helping reduce MTTR by 60%. Pera People Science B.V: This DevOps transformation, we optimized software delivery, prioritized security, and automation with GitHub Actions. Impressive results include fewer PagerDuty tickets, ensuring efficiency and resilience. By adopting a combination of advanced techniques and open-source solutions, this transformation not only reduced deployment downtime but also optimized AWS costs significantly. CGI Life and Health Insurance Agile and DevOps Team: CGI has a strong foundation & framework for DevOps & Agile implementation. CGI supported one of the largest Insurance Group company to digitize their Non-Life Insurance business model. The legacy platform involved various Line of Business, 1000+ products, complex technologies & diverse global teams, the purpose of this program was to reduce time to market and operational cost. The team developed a solution which accelerated time to market by 20X and Year on Year Growth of 3% - 5%. Question Title * 8. Best DevOps Event of the Year"Which DevOps event stands out from the others?" DevOps World 2023 (CloudBees): DevOps World 2023 took to the road, visiting five cities: NY, Chicago, Santa Clara, Singapore, and London. Attendees gained insights from top DevOps practitioners, were exposed to the latest in technology/tools, and expanded their network by interacting with other developers and leaders, sharing ideas, and participating in roundtable discussions on relevant topics. There were also hands-on workshops, where experts presented topics related to modern software delivery, DevSecOps, and open source. DevOps Exchange: The DevOps Exchange isn't just a network; it's a thriving, global community that ignites the passion for DevOps. With 8 local DevOps Meetups spanning 4 countries and an ever-growing community of over 15,000 on our Meetup group, we're making waves and setting records to become the largest DevOps Community in the world. Since 2014, we've taken the DevOps world by storm, hosting over 210 incredible events attracting over 2,230 attendees, ensuring that our members come back time and time again. GrafanaCON 2023 (Grafana Labs): GrafanaCON 2023 which marked the release of Grafana 10 and kicked off celebrations for the open source project's 10-year anniversary took place virtually from June 12 to June 14, and featured more than 30 sessions with speakers from Grafana Labs as well as users from NASA Ames Research Center, Toyota Racing Development, DHL Express Switzerland, and NVIDIA. The event brought together Grafana users from around the world for three days of presentations, live workshops, and community building. swampUP (JFrog): JFrog brings the DevOps community and some of the world's leading corporations together for the annual swampUP conference, aimed at providing real solutions to developers and development teams in practical ways to prepare us all for what's coming next. Galaxy '23 (LaunchDarkly): LaunchDarkly's annual user conference Galaxy '23 consisted of two days full of innovation and insights designed to educate DevOps professionals about how to build software products that customers love. During these two days, attendees heard compelling customer stories, learned about new product capabilities and solutions, and joined hands-on workshops focused on building new features, targeting, migration, product experimentation, and more. PASS Data Community Summit (Redgate Software): PASS Data Community Summit is the go-to conference for data professionals to connect, share, and learn, with a strong reputation for surfacing the latest trends, from industry leaders such as Redgate, Microsoft, AWS and Google. There are 18 DevOps-focused sessions across the week, including a full-day pre-con and dedicated DevOps learning pathway. As well as a week of education, peer connections are what makes Summit a special and career-defining conference to attend. Question Title * 9. Most Innovative DevOps Open Source Project"Open source projects are meant to promote innovation and increase efficiency, velocity and quality. While there are many great open source projects out there, the best ones are those that create a community of people who work on and with the technology and support each other." Coder OS (Coder): Coder's OS, cloud-native platform allows developers to write, run and test their code on any device, from anywhere, using a Cloud Development Environment (CDE). Coder's self-hosted CDE provides flexibility, while retaining the simplicity of SaaS-based environments. Coder 2.0, launched in September 2023, provides Microsoft Dev Container support, a Template Registry and tight integration with JFrog Artifactory and Xray. With Coder, teams can instantly spin up secure, customizable workspaces. AIaC (AI generator for infrastructure as code by Firefly.ai): AIaC generates infrastructure as code such as CloudFormation, Pulumi and more using English-language prompts. It can be used on its own or in conjunction with your DevOps tool chain and IaC orchestrators. It's especially handy for tackling less popular IaC frameworks not covered by commercial software solutions. AIaC.dev was launched this year and has nearly 3000 stars. Beyla (Grafana Labs): Introduced in September 2023, Grafana Beyla is an open source eBPF (Extended Berkeley Packet Filter) auto-instrumentation tool that reports span information for basic transactions as well as RED metrics (Rate-Errors-Duration) for both Linux HTTP/S and gRPC services ” all without requiring any code modification to manually insert probes. Jenkins: Jenkins is the leading open source automation server. Using an extensible, plugin-based architecture, developers have created 1,800+ plugins to enable Jenkins to integrate with a multitude of build, test and deployment technologies. Growth in Jenkins Pipeline adoption for CI/CD process automation grew 79% from June 2021 “ June 2023, while total workloads on Jenkins during the same period grew by 45%. Frogbot (JFrog): JFrog Frogbot is a Git bot that scans your repositories for security vulnerabilities in pull requests before merging, ensuring early detection and fixing of issues. It also periodically scans the Git repo and creates fix pull requests when vulnerabilities are found. Galasa (Open Mainframe Project): Galasa is an integrated test framework that allows seamless and automated testing between the z/OS Mainframe environment, and cloud environments in a single test. The purpose and vision of Galasa is to allow customers to deliver software with confidence by simplifying and encouraging automated integration testing to help Mainframe modernisation within Hybrid Cloud environments and increase the reliability of repeatable software releases. OpenRewrite (OpenRewrite / Moderne): OpenRewrite is an open source code refactoring, remediation, and modernization automation tool. CNAPPgoat (Tenable Open Source): CNAPPgoat is an open-source project for safe testing of cloud security skills, processes, and tools in an easy to deploy and destroy sandbox environment. This enables defenders to test detection and prevention mechanisms against vulnerabilities and misconfigurations, while providing offensive professionals practice environments. With a large and expanding library of scenarios, DevSecOps teams can validate their defenses in customized environments and simulate unsecured and vulnerable assets. Terrascan (Tenable Open Source): With Terrascan (Tenable Open Source):users can scan nearly all IaC types for misconfigurations and compliance violations with 500+ out-of-the-box policies. It leverages the Open Policy Agent (OPA) engine so you can easily create custom policies using the Rego query language. Integrate into your CI/CD, use locally or test code in your browser to see how effective preventive security can be. With 4k GitHub stars 1.8 million downloads, Terrascan is one of the most beloved open source security tools in the world. Question Title * 10. DevOps Executive of the Year"This category celebrates excellence among DevOps leaders at the C-suite (or equivalent) levels." Garima Bajpai (Canada DevOps Community of Practice): Garima is thought leader in DevOps & Cloud technologies. She is the founder of DevOps Community of Practice, Canada, supported by Crowdbyte Solutions Inc. She leads the ambassador program for the Continuous Delivery Foundation. Some might know her as a course contributor and instructor for various DevOps courses from leading certification bodies. She has over two decades of experience leading large-scale R&D with a variety of teams and has helped them adapt DevOps to increase team productivity. Dan Rogers (LaunchDarkly): For the first time in history, LaunchDarkly named a new CEO, Dan Rogers. After going on a "customer listening tour" to learn about market pain points, Dan developed a new company mission "to help engineering teams build products that their customers love." In less than a year, Dan has helped deliver the biggest innovation payload in company history, built a world-class leadership team, developed a high-performing and mission-driven culture and strengthened LaunchDarkly's Developer community. Idit Levine (Solo.io): Idit Levine, CEO of Solo.io, is an outstanding nominee for DevOps Executive of the Year. Leveraging her extensive background as CTO at EMC's cloud management division, she pioneers advancements in microservices, cloud-native apps, & orchestration. Idit's leadership at Solo.io, an innovator in service mesh & Istio, led to unicorn status, addresses critical DevOps challenges. Her dedication to open source projects embodies the DevOps mindset, making her highly deserving of this prestigious award. Kavitha Srinivasulu (TCS): Working with high expertise on Risk & Compliance with 20 years of experience focused on BFSI, Retail, Health care, IT Services and Telecom spanning across IT Security, Data Privacy, Business Resilience, Delivery Assurance and Vendor/3rd party Risk Management. Demonstrated proficiency in ISO, CRS, GRC, Lead Auditing and Project Management with diverse experience across corporate and Strategic Partners. Question Title * 11. Best DevOps Presentation of the Year"This category recognizes the best DevOps-themed presentation from the many conferences during the year." Time to Rip Off the Training Wheels and Enable End-to-End Automation, a SHARE Atlanta 2023 presentation by Tony Anter and Mark Schettenhelm (BMC Software): Mainframe organizations are moving to modern source code management (SCM) systems that enable agility and parallel development with automated build, test, deploy, and orchestration tools. Now it is time to take this to the next level and rip the training wheels off. In this audience-interactive session, Tony and Mark discussed ChatOps and real-time event notification, creating an event-driven architecture for mainframe DevOps, mainframe API layers, and change management automation. Beyond Agile Auditing: The Path to a Better Audit Experience by Clarissa Lucas: DevOps is all about removing the friction in delivering value to end users. Much has been said so far about automation, security, and product mindset. We could go as far as to say that those are, in a way, "solved problems." The next bottleneck enterprise organizations face is governance and coexistence with society and its rules. Clarissa Lucas' talk "Beyond Agile Auditing: The Path to a Better Audit Experience" introduced modern organizational practices to Audit which was previously unheard of. Question Title * 12. Best DevOps.com Article of the Year"DevOps.com publishes multiple articles every day. Which was the best article from 2022? Let us know so we can recognize the author." Six Mainframe DevOps Predictions for 2023 (BMC Software): John McKenny's "Six Mainframe DevOps Predictions for 2023 article includes predictions for the rise of AI/ML in mainframe DevOps metrics. These predictions have been validated as the mainframe industry starts to adopt these technologies and vendors are delivering AI/ML-driven dashboards that enable the gathering of vital metrics like DORA and the measurement of Git-centric source code management (SCM). VS Code for Mainframe: The Enterprise Developer Tipping Point (Broadcom): It's hard to shift left when you're using green screens. A developer's environment is their workplace and, for many, their workplaces weren't designed for DevOps. In large enterprises, the full promise of DevOps will only be realized when developers of all business-critical applications are empowered with modern, extensible tools. Today, VS Code is the standard and once mainframe developers are empowered, enterprises will be free to embrace the new world of AI with end-to-end DevOps. Muneesh Sharma (Neem Consulting Ltd.): Our DevSecOps approach effortlessly integrates security practices into the DevOps framework, underscoring the vital role of security throughout the software development process. This method automates security procedures to ensure the consistent implementation of security measures throughout the development lifecycle. By merging security with DevOps, organizations gain the capability to proactively identify and address security vulnerabilities, ultimately reducing the risk of breaches. Tools and Services Awards Question Title * 13. Best End-to-End DevOps Tool/Service"Consolidation in the DevOps space has led to a greater selection of platforms offering end-to-end solutions. This award honors the platform with the most diverse and robust solution for DevOps teams." Bitrise: Bitrise's Mobile DevOps platform automates the most labor-intensive tasks in the mobile app development lifecycle, including testing, building, troubleshooting, deployment and other critical steps across the release cycle. The platform features more than 400 tools and integrations that, together, make up the complete mobile app development workflow. Its end-to-end solutions enable users to release app updates faster and more frequently, and focus on the product innovation necessary to compete. Copado: Over the past decade, DevOps has transformed the way organizations develop, deliver, and maintain software, enabling them to achieve faster time-to-market, improved quality, and increased collaboration. Copado is the leading DevOps platform and they built a market-leading solution that enables enterprises to automate, extend and customize their DevOps processes by offering CI/CD, data deployments, monitoring, agile planning, testing, compliance and omnipresent AI right out of the box. Harness Software Delivery Platform: Harness is a leading end-to-end software delivery platform improving the developer experience and empowering the 30 million software developers worldwide with a comprehensive solution to deliver software to their end-users with velocity, security, reliability, and efficiency. Harness has modules to cover every step of the software delivery lifecycle, including building, testing, securing, deploying, managing reliability, and optimizing cloud costs with AI/ML infused throughout. Morpheus v6.x: Morpheus is a unified orchestration platform designed to provide a paved road to Developers and satisfy the needs of IT, Security, and Finance teams. What began as an internal developer platform to modernize apps within a $4B PE portfolio has grown into a leading enterprise software solution used to fully automate the end-to-end lifecycle of millions of applications. It integrates disparate tools and clouds to enable PlatformOps for hundreds of enterprises, system integrators, and MSPs. The Netlify Platform: Netlify is a leading platform in modern composable web development, connecting developer tools and workflows to build and run millions of sites, stores & apps. Netlify includes release management, web operations, network security, CDN provisioning, CI/CD for the web experience layer, observability instrumentation, autoscaling and more. By abstracting away traditional operations, time to market is greatly improved and on average Netlify enterprise clients publish 28 times to production per day. PagerDuty Process Automation: PagerDuty Process Automation, based on the open source project Rundeck, provides a design time and run time environment for orchestrating automated IT and DevOps operational workflows that span across teams, technologies, and environments. Process Automation is seamlessly connected with the rest of PagerDuty Operations Cloud. Sourcegraph's Code AI Platform: Sourcegraph is a code AI platform that makes it easy to read, write, and fix code“even in big, complex code bases. Our code graph powers Cody, the most powerful and accurate code AI for writing, fixing, and maintaining code, and Code Search, helping devs explore their entire codebase and make large-scale migrations and security fixes. Our customers include 4 of the top 10 banks, 4/5 FAANG companies, government orgs, Uber, Plaid, + many others building software that pushes the world forward. BMC AMI DevX: BMC AMI DevX is the best end-to-end platform for DevOps. This platform includes automation tooling for every step of the SDLC lifecycle from development through to testing, scanning, and deployment capabilities. It provides all this through our BMC AMI DevX Workbench capability, which is a single pane of glass into the platform. BMC AMI DevX provides you a single place to manage end-to-end DevOps capabilities on the mainframe platform where the core of your business takes place. Digital.ai AI-Powered DevSecOps Platform: Digital.ai's AI-powered DevSecOps platform unifies, secures, and generates predictive insights across the software delivery lifecycle. JFrog Software Supply Chain Platform: The JFrog Software Supply Chain Platform unifies, accelerates and secures your software delivery, from development to device. The end-to-end platform offers deeper development, security, and operations integration, in a flexible, and expandable platform that delivers increased security, visibility, and control on-premise, in the cloud, and at the edge. Nethopper KAOPS: Nethopper KAOPS is a GitOps-centric platform engineering as a service, which simplifies the ‘Ops’ in DevOps. It integrates a best-of-breed stack of cloud-native/open-source SW for infrastructure automation, CI/CD pipeline for containers, CD, multi-cluster/cloud application networking, secrets management, and observability with AIOps. KAOPS' single-UI works across any Kubernetes in any cloud to reduce cognitive load and complexity and accelerate time-to-market by 2+ years: a Jr. Dev can use it. Opsera Unified DevOps Platform: The Opsera Unified DevOps Platform offers comprehensive orchestration for automated CI/CD pipeline creation and management, a robust selection of pre-built integrations and actionable unified performance insights from across your software tools and teams. With Opsera, enterprises achieve faster release cycles, maintain and improve quality, and increase efficiency using data-driven insights. Rootly: Rootly offers the best enterprise-grade incident management platform, proven to help accelerate incident resolution times by 80 percent or more. Rootly's simple and configurable platform can be set up in 10 minutes, and with 50+ integrations automates manual admin work such as paging responders, incident creation, tracking action items and metrics, stakeholder communication, and generating retrospectives. Reliability Management: Sumo Logic Reliability Management is a new observability capability from Sumo Logic. It helps organizations adopt a more proactive and fundamentally better approach to measure and improve the reliability of their distributed applications. With Sumo Logic Reliability Management, organizations gain the real-time metrics needed to power data-driven decision-making and balance performance, innovation and service reliability. Question Title * 14. Best DevOps Repo/GitOps Tool/Service"GitOps is an integral part of the DevOps toolbox. This award is presented to the most outstanding GitOps tool." gitStream (LinearB): Code review is an essential part of software development. However, inefficient pull request (PR) processes impact teams' cycle times and leave developers feeling frustrated. gitStream by LinearB is a dynamic rule engine that allows users to define PR conditions and results, providing the flexibility needed to adapt to unique team needs. Engineering teams leveraging gitStream shorten PR reviews by 40%. Question Title * 15. Best CI/CD Tool"This award recognizes the best CI/CD tool that helps create a solid pipeline to deliver quality code more quickly." Bitrise: Bitrise's CI/CD platform is built specifically for the nuances of mobile app development, which stem from the increased demand for frequent and fast app store updates. By automating the most labor intensive”and historically manual”tasks in the mobile app development lifecycle, Bitrise users like Reddit and Equinox can release to app stores faster and more frequently. This enables developers to focus on the product innovation necessary to compete in today's rapidly growing mobile market. BMC AMI DevX Code Pipeline: BMC AMI DevX Code Pipeline is a modern mainframe CI/CD tool that ensures code pipelines are secure, stable, and streamlined throughout the DevOps lifecycle. Developers gain the confidence of knowing they can quickly and safely build, test, and deploy mainframe code. Buildkite Pipelines: Buildkite Pipelines deploys on any OS, in any language, offering highly flexible DX that grants full control of DevOps workflows to users. Buildkite Pipelines prioritizes speed, scale and security, allowing users to bring their own compute, separate the SaaS control panel and self-hosted runners, and build unlimited parallelisation. Users can choose to control through the CLI, and can visualize all builds, pipelines, metrics and statuses through the industry-leading UI. CircleCI: CircleCI is the developer CI/CD tool of choice, enabling 2+ million users globally to rapidly build, test, and deploy code they can trust. Through powerful pipeline automation, CircleCI manages limitless complexity at scale through unmatched flexibility and reliability, giving software teams the confidence to innovate faster (+70% time to market) and accelerate release cycles. With a +20% increase in AI/ML orgs building on CircleCI, it is the standard for modern developers pioneering AI. CloudBees CI/CDRO: CloudBees CI/CDRO is an integrated solution that can also be used separately or integrated with other tools. It provides highly scalable, resilient, and flexible CI based on Jenkins. CloudBees CI can handle complex challenges in managing and scaling Jenkins across enterprise environments. CloudBees CD/RO provides application release orchestration and deployment automation. Enterprises use CloudBees CD/RO because they need a governed release process with real-time transparency across the SDLC. Codefresh CI/CD Solution: Codefresh is a CI/CD solution for modern applications, helping DevOps teams automate from code to cloud with lightning-fast builds and Canary and Blue/Green GitOps deployments powered by Argo. Codefresh gives developers the control and stability to build and release more frequently while enabling smoother deployments to the cloud, on-prem or edge. Codefresh simplifies the management of apps throughout the lifecycle “ dev, staging, and production “ with a drag-and-drop, single screen experience. Copado: Designed for the new breed of non-technical and technical low-code delivery teams, Copado enables customers to integrate continuous quality into every branch of code deployed by embedding end-to-end testing. One of the first companies to achieve this milestone, Copado ensures quality, security and compliance across every step of the software development lifecycle. Earlier this year, it was the first to natively integrate testing into its low-code CI/CD DevOps platform. Octopus Deploy: Octopus Deploy sets the standard for deployment automation. We help software teams deploy freely when and where they need, in an easy, automated way. More than 3,000 organizations and 350,000 users worldwide use our universal deployment automation solution to make their complex deployments easy. From modern containers and microservices to trusted legacy applications, Octopus orchestrates software delivery in data centers, multi-cloud, and hybrid IT infrastructure. OpsMx Secure CD: OpsMx Secure CD is the first software delivery and deployment solution specifically designed for enterprise security and compliance. OpsMx Secure CD combines a comprehensive GitOps multi-cloud delivery and deployment platform with DevSecOps capabilities to automatically enforce and audit security compliance. Enterprises use OpsMx Secure CD to manage security posture, accelerate multicloud and Kubernetes deployments, automate approvals, block vulnerabilities, and enforce policy compliance. Question Title * 16. Best Value Stream Management Tool"Value stream management has come into its own as an important tool for measuring the business value of DevOps and application development. This award recognizes the value stream management tool that most effectively helps visualize the value stream, track metrics and measure improvement." Allstacks Platform: Allstacks has created a platform to make it easier for software development teams and engineering leaders to align their work to the needs of the business, improving visibility across the organization and empowering teams to deliver software both more predictably and efficiently. ValueOps by Broadcom: ValueOps by Broadcom is the industry's only complete solution for end-to-end value stream management capable of driving digital transformation by bringing visibility, alignment, and efficiency to the entire value stream lifecycle. It's the first industry solution to add Value to Value Stream Management, by extending the VSM concept beyond DevOps and operational roles to include capabilities and metrics that matter to business leaders. Digital.ai's Value Stream Management Tool: Digital.ai's Value Stream Management Tool unifies, secures and generates predictive insights across the software lifecycle, empowering teams, propelling innovation and enhancing business value. LinearB: Value stream management is an integral part of DevOps, but without the right platform in place, reducing waste and improving efficiencies is difficult. LinearB offers a purpose-built platform that provides visibility for engineering teams to optimize workflows and improve productivity. Now, engineering leaders can ensure projects and resources are aligned with business priorities and objectives. Planview Value Stream Management: Planview's Value Stream Management solution optimizes value stream delivery by connecting software delivery toolchains from end-to-end, providing visibility and traceability into the flow of work across the entire value stream. Flow Metrics and Portfolio Insights are generated so business leaders can make informed, data-driven decisions that reduce operational costs and inefficiencies, and improve work predictability and time-to-market. Question Title * 17. Best Observability Solution"This award recognizes the best observability solution for observing and monitoring performance logs and metrics to understand the performance of individual components and systems." Apica: Apica is a leading data management and active observability company that gives customers limitless data, 100% control over their own data, and contextualized insights for any device, authentication service, or application. The Ascent platform delivers active observability, automated root cause analysis, and advanced data management to quickly find and resolve complex digital performance issues before they negatively impact the bottom line. Apica keeps enterprises operating. BMC Helix Operations Management with AIOps: Harness the power of complexity with BMC Helix Operations Management with AIOps observability. Turn the modern flood of data into a competitive advantage. 1.3M metrics are ingested EVERY second. The ONLY AIOps solution with topology reconciliation, it is designed to empower organizations using advanced AIOps capabilities. This provides a holistic view of IT infrastructure health and performance, enabling teams to proactively identify and resolve issues before they impact business operations. Cribl Stream: Cribl offers an observability pipeline for DevOps and SREs to collect and receive observability data from multiple sources, shape and reformat the data, and route it to the right destination. Cribl integrates with popular observability tools and frameworks like OTEL, Datadog, Dynatrace, Grafana, Honeycomb, and New Relic. With choice and control over observability data, Cribl users can observe more and spend less. Grafana Cloud Free Tier: Grafana Cloud extends observability beyond metrics, logs, & traces with a wide range of solutions for infrastructure monitoring, IRM, load testing, Kubernetes monitoring, continuous profiling, frontend observability, & more. The "actually useful" Cloud Free tier, has now expanded to include access to the entire catalog of Enterprise plugins and other features previously only available in Grafana Labs' paid offerings, helping meet users where they are, without a high barrier to entry. Lightrun Observability Platform: Lightrun is transforming the way developers troubleshoot their remote and distributed workload application. With its Shift Left strategy, Lightrun empowers developers to debug in runtime the most complex applications including cloud-native, servereless, legacy/monolith, feature flags, CI/CD, and more directly from the developers IDEs. With dynamic instrumentation abilities, developers can add conditional and sophisticated logs, snapshots and metrics to apps in runtime without redeployments. Memfault: Memfault offers the leading IoT observability platform that gives DevOps teams a more scalable and sustainable cloud-based process to build and operate more reliable IoT devices.Founded by embedded engineers at Fitbit, Oculus, and Pebble, Memfault helps devs accelerate go-to-market, de-risk product launches, cut product costs, and deliver overall superior products. Memfault's platform works on most IoT devices with cross-platform support for MCU (including RTOS & bare metal), Android, & Linux. The New Relic All-In-One Observability Platform: The most widely used observability platform New Relic delivers the only unified data platform for all telemetry paired with powerful full-stack analysis tools in one connected experience as part of the existing DevOps workflow. Delivered through intuitive, predictable usage-based pricing, the New Relic all-in-one observability platform offers 30+ capabilities and continuously expands with cutting-edge innovations, like New Relic Grok, so engineers can do their best work with data, not opinions. Observe: Observe is a SaaS observability platform reinventing the way telemetry data is stored, managed and analyzed. Observe enables Engineering and DevOps teams to troubleshoot modern distributed applications an order of magnitude faster, improving customer experience and reducing churn. Observe is the only observability platform delivering real-time insights on data volumes exceeding one petabyte per day, eliminating silos of logs, metrics & traces by storing all data in a central, low-cost data lake. StackState: Designed to help engineers and developers who build and support Kubernetes applications, StackState's advanced observability platform helps teams fix problems fast and stop them from reoccurring so they can optimize performance, seamlessly collaborate across teams and deliver more innovation. Leading enterprises like KPN, Vodafone, Accenture and Danske Bank rely on StackState. In fact, Accenture saw a reduction of 400 incidents per week to less than 2 per week with implementation of StackState. BMC AMI zAdviser Enterprise: BMC AMI zAdviser Enterprise harnesses data from the BMC AMI DevX toolset to empower organizations with precise insights into the software development lifecycle (SDLC) on the mainframe. With application development KPIs, artificial intelligence and machine learning (AI/ML)-driven anomaly detection, and prescriptive analytics, the solution further optimizes development processes for everyone on the software delivery team to improve decision-making and enhance code quality to minimize technical debt. Cisco Observability Platform: The Cisco Observability Platform is a vendor-agnostic solution that harnesses the power of Cisco’s portfolio. It delivers contextual, correlated, and predictive insights that allow customers to resolve issues more quickly, optimize experiences, and minimize business risk. This industry-leading offering enables a new observability ecosystem that brings data together from multiple domains including application, networking, infrastructure, security, cloud, sustainability, and business sources. Edge Delta: Edge Delta is a new way to do observability. We are the only provider that processes your data as it's created and give DevOps and SRE teams the freedom to route it anywhere. As a result, customers can make observability costs predictable, surface the most useful insights, and shape your data however they need. Honeycomb.io: Honeycomb is the leading observability platform that enables engineering teams to find and solve problems they couldn't before. It enables engineers to answer novel questions about their ever-evolving cloud applications, so they can deploy confidently, resolve incidents faster, and focus on high-value work that drives innovation. Logz.io Open 360™ Platform: Open 360 is Logz.io's observability platform that unifies log, metric, and trace analytics. Effortless to deploy, scale, and manage, the cloud-native SaaS platform integrates with an existing stack and handles the entire data pipeline, seamlessly scaling up and down as data volumes change. Open 360 unifies and enhances the world's most familiar open source observability technologies that millions of engineers already rely on, reducing total cost of ownership of observability and reducing MTTR. Mezmo Telemetry Pipeline: Mezmo is transforming DevOps, arming teams with actionable insights to more efficiently develop and debug their applications. Mezmo's Telemetry Pipeline makes it easy for DevOps teams to deliver outcomes faster by unlocking telemetry data stuck in system silos to provide a complete view into applications, deployments, and more. Nobl9 Reliability Center: Nobl9 Reliability Center aggregates system reliability data across platforms and applications, sitting on top of customers' current monitoring and observability systems and empowering them to set service level objectives and track error budgets, no matter which tools are used. This granular view allows users to quickly understand the reliability of their software and operations allowing them to make key business decisions in real-time about the resiliency of their system. SolarWinds Observability: SolarWinds® Observability is a fully integrated, cloud-native software as a service (SaaS) solution offering unified and comprehensive visibility across the entire technology stack. By utilizing AI/ML powered Health Scores, it supports modern and custom web applications to help ensure key service-level objectives are met and optimal user experiences are delivered. SolarWinds Observability enables DevOps teams to accelerate innovation and deliver better applications faster. vFunction Architectural Observability Manager: vFunction, the continuous modernization platform, introduced Architectural Observability Manager (AO) in 2023. It's the first application modernization solution to continuously manage and remediate architectural technical debt and automate refactoring. Architectural Observability Manager (AO) empowers software architects to deeply understand their software architecture and manage, find, and fix architectural technical drift and debt in their applications. Question Title * 18. Best DevSecOps Solution"This award honors the best DevSecOps solution, which enables security to be included earlier and continuously throughout the SDLC." Broadcom SBOMz: Broadcom SBOMz is a mainframe native tool for generating Software Bills of Material. SBOMs are a key component in evolving software supply chain security and policy automation best practices. Using SBOMs, organizations can easily verify what makes up the software being consumed and ensure it has not been compromised and is safe to use. Applying supply chain security practices to mainframe ensures a single standard for security is met across the enterprise. CodeSonar: CodeSecure CodeSonar is a SAST solution that enables organizations to create and release high quality, secure software even in embedded software development pipelines. Using CodeSonar, developers can implement security early and throughout the Software Development Life Cycle (SDLC), without impacting innovation or slowing time-to-market. CodeSonar saves time and money by detecting problems as they are introduced so they can be fixed before a product reaches testing or customers. CodeSentry: CodeSecure CodeSentry addresses software supply chain security by detecting open source security vulnerabilities under the hood in third party code. Specifically, CodeSentry uses binary software composition analysis (BSCA) to identify known threats (CVEs) and common weakness enumeration (CWE) errors in externally developed software components without the need for access to source code. Dazz Remediation Cloud: Dazz stands for DevSecOps A 2 Z and in true form was created to help security teams and engineers solve one of the biggest pain points in cloud development ” remediation. The company's SaaS platform, called the Dazz Remediation Cloud, uses AI, root cause analysis, and data correlation to automate complex processes and allow development teams to rapidly prioritize efforts, maximize efficiency, and eliminate risk. Digital.ai AI-Powered DevSecOps Platform: Digital.ai provides a DevSecOps solution that delivers better, more secure software by not only integrating security early in the development cycle, but also monitoring apps in production for attacks. GitLab: GitLab helps customers accelerate their digital transformation initiatives through every step of the software development lifecycle, and supports all functions responsible for delivering software, including development, security, and operations. GitLab's AI-powered DevSecOps platform helps organizations build better, more secure, software faster, while increasing operational efficiency and reducing security and compliance risk. Mend Application Security Platform by Mend.io: Mend Application Security Platform is the industry's first-ever solution for automated remediation of custom source code security issues and the first platform to automatically find and fix application security holes involving both open source and custom code. The platform delivers automated and reduced remediation time (80%) for SCA and SAST directly in the developer's repository. Organizations such as IBM and Microsoft leverage the platform to reduce security risk and increase productivity. Progress Chef: Progress® Chef® is an industry-leading portfolio that addresses the full spectrum of DevOps and DevSecOps, using a single ˜as code' framework to configure, deploy and manage virtually any asset on any cloud to any edge, including support for any infrastructure or application including cloud-native assets like Kubernetes and public cloud services. DuploCloud DevOps Automation Platform: DuploCloud is a revolutionary no-code/low-code software automation and compliance platform designed to meet all your cloud infrastructure needs. Designed for organizations building cloud-native applications or migrating to the cloud, DuploCloud acts as a digital subject matter expert across hundreds of services in AWS, Azure, GCP, Kubernetes, Security, and IoT, among others. Graylog: Graylog excels as the Best DevSecOps Solution by prioritizing the analyst experience, offering an open, integrative platform, embracing open-source principles, and enabling data exploration. Our innovative approach empowers users to uncover insights, not just structured search queries. Graylog revolutionizes API security and is the choice for forward-thinking organizations. JFrog Curation: JFrog Curation blocks the use of risky open source software packages without compromising development speed or the developer experience. JFrog Curation uses binary metadata for identifying malicious packages with higher-severity CVEs, operational, or license compliance issues. This removes the need to download each package for scanning before use, thus preserving developer ease and speed. Lineaje AI with BOMbots: BOMbots, powered by Lineaje AI, are AI-based automation bots that analyze deep software bill of materials (SBOMs) to deliver optimized remediations across the entire supply chain. BOMbots create intelligent recommendations, enabling developers and security analysts to make better decisions ” resulting in software that is more secure and delivered with efficiency. Using BOMbots, software producers can reduce effort spent on software by up to 40% and cut software upgrade costs by the same amount. Moderne: Security vulnerabilities are outpacing remediation efforts, overwhelming developers. The Moderne platform provides rich insights into security issues in a codebase and can auto-remediate code weaknesses and vulnerabilities at scale. By automating the shift left of security, Moderne enables development teams to put security concerns at the top of their lists and close them out fast, while still meeting the needs of the business. ReversingLabs Software Supply Chain Security platform: Gartner reports that 45% of organizations will suffer from software supply chain attacks by 2025. ReversingLabs helps customers address software build security with its proprietary, differentiated static binary analysis technology. This technology conducts the final build exam of fully compiled and signed software packages - a complex mix of internally developed code, open source code and packaged binaries - to ID potential software supply chain breaches and ensure final build integrity. Tanzu Application Platform: VMware Tanzu Application Platform is a single, end-to-end integrated platform solution that provides development teams a 'golden path,' a pre-paved path to production to get code running on any compliant public cloud or on-premises Kubernetes cluster, enabling security and scale. Xygeni Software Supply Chain Security Solution: Xygeni solution safeguards the SDLC from the earliest stages. Unparalleled observability enables every asset to be automatically accounted for and secure. Continuous scanning for vulnerabilities ensures OSS components are risk-free. Automated CI/CD testing protects the DevOps infra and pipelines from misconfigurations, leaked secrets, tampering and malicious code. For unresolved issues, our anomalous activity detection identifies threats in real time to enable immediate response and security. Question Title * 19. Best Testing Service/Tool"Testing is a mainstay in the DevOps toolchain, and this award recognizes the most popular testing tool for ensuring the quality of code release." Telepresence (Ambassador Labs): Telepresence is a Kubernetes native tool created to bridge the gap between local and remote development environments- accelerating collaborative development, debugging, and testing for Kubernetes users. Utilizing Telepresence, developers working on Kubernetes can code as if their laptop is in the cluster. With increased feedback loops, faster app dev and delivery, and reduced cloud infrastructure cost, Telepresence is simplifying your Kubernetes journey. Applitools: Applitools is the pioneer in leveraging AI for testing, offers the next-generation test automation platform powered by Visual AI and has products that add AI into every step of the testing pipeline. Applitools Eyes replicates the human eye to automatically spot functional and visual bugs in every release. With Applitools' Ultrafast Test Cloud, Native Mobile Grid, Ultrafast Grid, Centra and Execution Cloud, design, dev, QA, Ops, marketing and product teams are integrated into the testing process. BMC AMI DevX Total Test: BMC AMI DevX Total Test enables developers to automate all aspects of both virtualized and non-virtualized testing, including unit, functional, system, integration, and regression testing. By creating and executing virtualized and non-virtualized tests, developers can create a comprehensive regression test suite that covers all potential failure scenarios, ultimately saving time and resources. Buildkite Test Analytics: Buildkite Test Analytics empowers developers to monitor various testing phases within their pipelines, identifying wasted compute, improving reliability and deploying code with confidence. Compatible with all Continuous Integration platforms, developers can accelerate code deployment to production through test suite optimization. Buildkite Test Analytics can also detect, resolve, and oversee test performance issues as well as monitor and enhance the reliability of test suites. Copado: Designed for the new breed of non-technical and technical low-code delivery teams, Copado enables customers to integrate continuous quality into every branch of code deployed by embedding end-to-end testing. One of the first companies to achieve this milestone, Copado ensures quality, security and compliance across every step of the software development lifecycle. Earlier this year, it was the first to natively integrate testing into its low-code CI/CD DevOps platform. Digital.ai Continuous Testing: Digital.ai Continuous Testing is a scalable web and mobile app testing solution that helps teams increase test coverage and make data-driven decisions so they can deliver high-quality, error-free web and mobile apps on time and at scale. Sauce Labs / Sauce Orchestrate: Sauce Labs is a leader in providing cutting-edge continuous testing and error-reporting solutions that streamline the creation, delivery, and enhancement of high-quality code. Sauce Labs provides a complete solution to optimize testing speed, efficiency, and scalability. In 2023 Sauce Labs launched Sauce Orchestrate, the all-in-one, purpose-built solution for both browser and mobile testing which enables their customers to complete comprehensive testing 70% faster. SonarQube: SonarQube provides value to development teams and enterprises with their Clean Code delivery from development to production. SonarQube is an open-source based product used for continuous inspection of code quality that also has a commercial offering that includes additional capabilities for enterprises. It automatically reviews code to detect bugs, code smells, and security vulnerabilities. SonarQube integrates into a Continuous Integration/Continuous Deployment (CI/CD) pipeline of most DevOps. Tricentis Mobile: Tricentis Mobile is a cutting-edge solution that empowers organizations to streamline mobile app testing processes. It integrates low-code authoring and real/virtual device testing, accelerates app delivery, resolves performance issues, and ensures superior quality cementing Tricentis as the most comprehensive end-to-end mobile testing solution on the market. Tricentis Mobile offers unmatched flexibility, coverage, and insights across the development cycle, making mobile testing seamless. Question Title * 20. Best Kubernetes Platform/Service"The adoption of containers has paved the way for an entire solutions ecosystem supporting and enhancing the container technology. Kubernetes is perhaps the most widely recognized and utilized. This award honors the most reliable and secure Kubernetes platform available." BMC Helix Operations Management with AIOps: BMC Helix is instrumental in driving transformative change within the DevOps community, with an innovative platform that fosters collaboration, automation, and continuous improvement. The cutting-edge, cloud-native operations and service management platform is designed to accelerate digital transformation. Robust features and capabilities are tailored to meet the evolving needs of modern DevOps teams, with seamless integration and collaboration across the entire software development lifecycle. Edge Delta: Edge Delta helps teams monitor Kubernetes resources and troubleshoot issues “ without compromising scale or going over budget. Using a distributed architecture, Edge Delta helps teams support growing data volumes as they adopt Kubernetes. More specifically, Edge Delta processes logs and metrics as they're created at the source, enabling teams to reduce costs without sacrificing visibility. Additionally, they can surface insights and trigger alerts before data leaves their environment. Kalix: Kalix is a PaaS developed by Lightbend that enables organizations to quickly build and deploy event-driven microservices and APIs at the lowest possible cost. It provides an out of the box cloud native stack that delivers a 200% increase in developer velocity with minimal operations required. It provides a unifying app layer that integrates the necessary pieces including databases, message brokers, caches, service meshes, API gateways and exposes them into one single unified model. Rafay Systems: Rafay offers a Cloud Automation Platform purpose-built for platform teams. It streamlines processes, providing automation and governance features to standardize Kubernetes toolsets and workflows. Moneygram, GuardantHealth and Verizon utilize Rafay to seamlessly manage Kubernetes across various environments ensuring centralized control and automated capabilities that enhance the overall experience for developer and operation teams. Question Title * 21. Best Cloud-Native Security Solution/Service"The cloud-native movement has been steadily gaining ground as more organizations recognize the benefits of building applications and services specifically for cloud-native environments. This award recognizes the best solutions and services considered cloud-native." The Aqua Platform (Aqua Security): Aqua stops cloud native attacks with the industry's first unified cloud native application protection platform (CNAPP), featuring intelligence-driven cloud native detection and response capabilities. Aqua secures customers' cloud native assets from day one, from code to cloud and back, and protects them in real time. Aqua ensures that prevention is automated and response is immediate, and it guarantees that protection with a $1M warranty. Axiomatics' Orchestrated Authorization Solution: Axiomatics' Orchestrated Authorization solution delivers a cloud-native secure and dynamic application experience. This attribute-based and policy-driven authorization solution avoids the pitfall of over-privileged users, role explosion, and access token bloat. It enables policy-as-code authorization, drives policy definition through a drag & drop GUI, tests your policies and audits your access logs to prove compliance with legal and business requirements. Britive Identity Security Platform: Britive empowers organizations to secure identities and simplify access so they can accelerate the adoption of cloud infrastructure, apps and data while preventing identity-based security breaches and operational disruptions. Britive's cloud-native Identity Security Platform is API-based and deploys in hours, not months like legacy PAM offerings. Our patented solution enables CloudOps, DevOps and Security teams to manage account permissions to eliminate the risk posed by over-privileged accounts. Cyera: Cyera's unified data security platform is AI-powered and agentless, delivering a cloud-native solution to stop data breaches and assure compliance for the cloud era. The platform automatically develops deep knowledge of all of an enterprise's sensitive data everywhere - across IaaS, DBaaS, SaaS and on-prem datastores - and automates the remediation of security and compliance exposures. With Cyera, security teams have the foundational platform to know their data and keep it secure. Dazz Remediation Cloud: Dazz revolutionizes how security and development teams work together to rapidly fix cloud native application and infrastructure issues and reduce risk. The company's flagship solution, the Dazz Remediation Cloud, analyzes data from development and cloud environments and cloud security tools to automate how teams cut alert noise, prioritize issues, identify root causes, and streamline fixes in a developer-friend workflow. Fleet Endpoint Security Platform (Fleet Device Management, Inc.): Fleet is a platform for IT and security teams with thousands of endpoints. Based on osquery, the leading open-source security agent, Fleet is dedicated to opening up IT and security through a living, breathing API, while maintaining scope transparency through open-source software. Organizations like Fastly and Gusto use Fleet for vulnerability management, endpoint operations, device trust, HIDS, FIM, posture assessment, device management, and more. JumpCloud Directory Platform: Organizations running cloud-native technologies and SaaS models of virtualized compute, storage, analytics and more need solutions that reduce complexity and package functions in disparate stacks into more-easily-deployable solutions. JumpCloud offers an open directory platform that unifies and secures user access across an entire employee base's workflow, irrespective of protocol, platform, provider, device type, or location. The Orca Cloud Security Platform: Orca is the pioneer of agentless cloud security that deploys in minutes and is trusted by hundreds of enterprises globally. Its patented SideScanningâ„- technology provides 100% visibility into risks and compliance issues across cloud workloads, configurations, and identities, and covers the entire SDLC. Orca's AI-driven platform enhances risk detection, simplifies investigations and speeds up remediation for cloud security, DevOps and development teams. Sumo Logic SaaS Log Analytics Platform: The Sumo Logic SaaS Log Analytics Platform is a leading cloud-native solution that allows customers to ingest data from across their ecosystems and transform cloud complexity into insights for developers and security operations. DevOps teams can proactively monitor applications in production environments for bugs, quickly detect security threats with the latest threat intelligence, and capture application and infrastructure performance metrics that improve business decision making. Sysdig Secure: In the cloud, every second counts. Attacks move at warp speed, and security teams must protect the business without slowing it down. Sysdig stops cloud attacks in real time, instantly detecting changes in risk with runtime insights and open source Falco. Sysdig correlates signals across cloud workloads, identities, and services to uncover hidden attack paths and prioritize real risk. From prevention to defense, Sysdig helps you focus on what matters: innovation. Tenable Cloud Security: With Tenable Cloud Security CNAPP you can easily ramp up security across all your AWS, Azure and GCP environments. From full asset discovery and deep risk analysis to runtime threat detection and compliance, you can reduce complexity, minimize your cloud exposure and enforce least privilege at scale. Tenable's comprehensive approach accurately visualizes and prioritizes security gaps, and gives you the built-in expertise and tools you need to remediate the risks that matter most. Tetrate Istio Subscription (TIS): Tetrate Istio Subscription (TIS) is the industry's only fully upstream service based on open source Istio, delivering training, architectural workshops, expert enterprise production support, best practices and, critically, extended CVE support. FIPS verified and fully compliant with NIST 207A and FedRAMP, TIS speeds application development, reduces security risks, and streamlines operations for increased MTTI & MTTR for critical apps. Question Title * 22. Best DevOps for Mainframe Solution"Mainframes are far from being the dinosaur of the IT world, and a variety of solutions are available for enabling DevOps practices in mainframe environments. This award recognizes the best of them." BMC AMI DevX tool suite (BMC Software): BMC empowers the next generation of developers to make the mainframe as adaptive as any other platform. With unparalleled agile application development, testing, and delivery, BMC AMI DevX provides a mainframe-inclusive DevOps toolchain that accelerates innovation and resiliency. BMC AMI DevX enables organizations to automate mainframe application development with a cross-platform DevOps toolchain and integrations that improve velocity, quality, and efficiency to power innovation. Code4z (Broadcom): It's hard to shift left when you're using green screens. DevOps is built on developer empowerment, yet those responsible for mission-critical mainframe apps are limited to pre-DevOps tooling and enterprises struggle to reap the full benefit as a result. Enter Code4z, a free and open extension pack for the phenomenally popular VS Code. Built on the DevOps Dozen-winning Zowe open-source framework, Code4z unlocks shift left practices for mainframe developers by delivering a modern agile experience. Wazi Deploy (IBM): Wazi Deploy is a brand new innovation that drives z/OS application deployment with a base of open source & standardized scripting using Redhat Ansible. It also allows customizations, a key requirement for z/OS clients, and integrates seamlessly into an enterprise pipeline, helping clients automate continuous deployment for z/OS applications. Wazi Deploy enables GitOps for z/OS customers, thus being the main ingredient required to be able to help z/OS clients transform to new DevOps practices. PopUp Mainframe: PopUp Mainframe is a cutting-edge mainframe modernisation product. PopUp enables customers to take the mainframe on their DevOps journey by creating fully functioning z/OS instances on-demand, on-prem or in the cloud, and controlling them through pipelines. This overcomes dev and test mainframe unavailability - the number one blocker to mainframe DevOps. PopUp liberates mainframe teams, enabling automation, DevOps innovation and continuous improvement with no risk to the physical mainframe. Rocket DevOps 10.2.2 (Rocket Software): Rocket DevOps 10.2.2 enables IBM i developers to integrate AI and popular open-source and third-party tools into mission critical mainframe applications. This includes Git, JIRA, Jenkins, and VS Code. The new integration allows fresh talent to experiment with new technology without compromising agility or causing disruptions to core operations. Rocket DevOps 10.2.2 is the premiere tool for organizations looking to adopt new technology at their own pace. Question Title * 23. Best DevOps for DataOps/Database Solution"Databases often have been left out of the DevOps conversation, but that is changing. This award recognizes the best solution to enable organizations to apply DevOps processes and practices to database development and management." BMC AMI DevOps for Db2® - BMC Software and BMC AMI SQL Performance for Db2® (BMC Software): Organizations adopting DevOps and DataOps face the challenges of siloed teams, delays in implementing database schema changes, unfamiliar tooling, and an inability to diagnose, track, and tune SQL-related performance problems. BMC bridges the gap between developers and DBAs, replacing manual tasks with automation, reducing risk, providing visibility, shift-left database change management, and SQL performance tooling to accelerate application delivery and performance. Coalesce Data Transformation Platform: Coalesce helps data experts transform data as efficiently as possible and manage incremental changes to data pipelines “ laying the foundation for safer and more predictable DataOps when building data warehouses through automation, version control, and data lineage. With Coalesce, data teams can build and manage data pipelines at least 10x faster and focus on what matters most: quickly generating value from data without sacrificing confidence, speed, or efficiency across their organization. Percona: Percona offers a unique combination of enterprise-grade open source software, support, managed services, and automated insights that, together, enable users to better monitor, manage, secure and optimize databases on any infrastructure. Percona supports all deployment configurations, improves developer velocity and self-service, and empowers organizations to scale, innovate, and improve efficiency. Flyway (Redgate Software): The database has joined the DevOps conversation, with developers, IT teams and enterprises recognizing that including the database in the development process enables value to be released to customers faster, while minimizing deployment errors. The popular open source database migration tool, Flyway, is proving to be key to this, giving users an easy way to automate database migrations across over 30 different databases. TDengine: TDengine™ is the popular open-source data platform purpose-built for time-series data. TDengine is designed to ingest, process, and analyze internet of things (IoT), industrial internet of things (IIoT) and time-series data at scale and is used in more than 50 countries worldwide. TDengine breaks down data silos, brings the benefits of AI to the IoT and IIoT sectors, and enables centralization, advanced analytics, and sharing of data. Question Title * 24. Best New DevOps Tool/Service Provider"This award recognizes the service provider or tool that has brought the most innovation to the DevOps space in the past year." Applause Crowdtesting Solution for DevOps Teams: Crowdtesting is a managed solution model that leverages the expertise of a community of testers from around the world. It offers nuanced insights and advantages that other forms of testing “in-house, lab-based or offshoring“ can't provide to the same extent. As bugs progress through the SDLC, they become increasingly more expensive to fix. Applause helps development teams discover bugs sooner in the software development life cycle, significantly improving time to release with fewer flaws. BMC AMI DevX Code Insights (BMC Software): Working with outdated mainframe systems is an issue for modern developers, with poor documentation, high complexity, and unfamiliar interfaces creating significant roadblocks. BMC AMI DevX Code Insights clears the way for progress by offering intuitive visualizations of mainframe code, helping developers of all experience levels understand interactions, dependencies, and relationships between programs. Developers can make changes to even the oldest and most complex mainframe code with confidence. BMC Helix ServiceOps, BMC Helix Operations Management with AIOps, BMC Helix ITSM: BMC continues its long-standing innovation in the marketplace by being the first to embed GPT across AI-driven service and operations. The BMC HelixGPT solution connects and distills data sources across the enterprise to deliver plain-language, actionable insights for autonomous resolution by connecting AIOps, DevOps, and ServiceOps. By embedding generative AI across the BMC Helix portfolio, our customers can simplify complexity and fuel productivity intelligently. Devtron: Devtron is a cloud-native, open-source application delivery platform designed to enhance the productivity and well-being of developers and DevOps engineers. It addresses the challenges of dealing with Kubernetes complexity, performing repetitive tasks (toil), and DevOps tooling sprawl. Devtron enables DevOps teams to provide a Developer self-service platform that uses templates and guardrails to accelerate software delivery while ensuring security and compliance. Firefly Cloud Asset Management: The Firefly Cloud Asset Management solution helps DevOps, SRE and platform engineers manage the cloud infrastructure upon which they depend. It creates infrastructure as code (such as Terraform, CloudFormation, etc) directly from existing cloud resources, then uses policies and code and continuous drift detection to keep your cloud configurations aligned to your desired state. It saves time, reduces cloud costs, and improves reliability and security through better cloud management. New Relic Grok: New Relic Grok, the first generative AI assistant for observability, eliminates the need for engineers to manually sift through large volumes of data, so any engineer can adopt observability, regardless of prior experience. Powered by OpenAI's GPT-4, engineers can unlock untapped insights from any telemetry data source and use natural language prompts”in more than 50 languages”like why is my service not working? to perform most tasks, like troubleshooting software issues across their stack. PerfectScale Platform: PerfectScale offers an innovative solution to enhance the performance and resilience of Kubernetes clusters, all while ensuring operational efficiency and cost-effectiveness. By seamlessly integrating into the application delivery processes, it streamlines optimization via intuitive single-click actions or autonomous adjustments. A user-friendly dashboard offers a holistic view of all active applications within clusters, detailing the cost, efficiency, resource wastage, and resilience metrics. PopUp Mainframe: PopUp Mainframe is a cutting-edge mainframe modernisation product. PopUp enables customers to take the mainframe on their DevOps journey by creating fully functioning z/OS instances on-demand, on-prem or in the cloud, and controlling them through pipelines. This overcomes dev and test mainframe unavailability - the number one blocker to mainframe DevOps. PopUp liberates mainframe teams, enabling automation, DevOps innovation and continuous improvement with no risk to the physical mainframe. Recommended Learning Paths (Security Journey): Recommended Learning Paths, launched in October 2023, is a new offering from Security Journey comprising collections of specially chosen lessons designed to elevate security training for individual roles within development teams. The group of lessons have been carefully curated by application security experts to improve knowledge, optimize training time, help meet compliance regulations, and respond to post-breach audit recommendations. Sourcegraph's AI coding assistant, Cody: Cody is an AI coding assistant that answers technical questions and writes code directly in the IDE. Using your code graph for context and accuracy, Cody empowers devs to code faster with autocompletions (single lines, whole functions, any programming language, config file, or doc) as well as a chat interface that helps unblock you when jumping into a new project or when trying to understand legacy code. Think of Cody as an always-available senior engineer that knows your codebase. Tabnine Chat: Tabnine Chat is an enterprise-grade, code-centric chat application that combines the latest large language models (LLMs) with codebase familiarity to transform organizations' entire software development experience aimed at supporting the workflows of professional developers. Tabnine Chat runs inside any IDE and is contextualized on whatever code the developer is working on in a secure and managed solution. Vercel: Vercel is the Frontend Cloud platform for major global companies, such as Sonos, eBay, Nintendo and Under Armour. With its Frontend Cloud, Vercel has reshaped the landscape of frontend software development in 2023 by offering purpose-built tools to craft dynamic websites, enhance AI web applications and eliminate the complexities, costs and time associated with custom infrastructure management. Vercel's AI tools streamline code optimization, performance enhancement, and workflow simplification. Question Title * 25. What is your first name? Question Title * 26. What is your last name? Question Title * 27. What is your email address? Question Title * 28. What is your company? Thank you for voting! For the final phase of the awards, our panel of esteemed judges will also vote and review the public voting results to determine the winners. Winners will be announced during the Predict 2024 Virtual Summit on January 18, 2024.Check DevOpsDozen.com or DevOps.com for updates. Done