A Decade of DevOps: Design Patterns for Future-Proofing Your DevOps Strategy

Jay Lyman
Senior Research Analyst, Applied
Infrastructure and DevOps
451 Research
Loreli Cadapan
Sr. Director Product Management
JFrog
Copyright © 2020 S&P Global Market Intelligence.
Permission to reprint or distribute any content from this presentation requires the prior written approval of S&P Global Market Intelligence.
A Decade of DevOps: Design
patterns for future-proofing
your DevOps strategy

2
OUR SPEAKERS:
Loreli Cadapan
Sr. Director
Product Management
JFrog
Jay Lyman
Principal Analyst
Cloud Native & DevOps
451 Research

Questions
To ask a question, click on the question button
Presentation Slides
A copy of the presentation slides are located in the
resources section for download
On Demand
The on-demand version of this webcast will be available
once the live webcast concludes
3
Housekeeping items

10 years of DevOps – changes and dynamics
•Top-down adoption
•Movement to the cloud
•Stakeholder spread
•Evolution of DevSecOps
•Embrace of cloud native
•Integration of AI/ML
•Measuring and proving success
4

Quickening pace of software releases
Q. Over the last 12 months, how often did your organization deploy most software applications to production?
Base: All respondents (n=530)
Source: 451 Research’s Voice of the Enterprise: DevOps, Workloads and Key Projects 2020

Primary environment for DevOps implementation today
Q. What is the primary environment for your organization’s DevOps implementation? What will it be in two years?
Base: All respondents (n= 509)
Source: 451 Research’s Voice of the Enterprise: Voice of the Enterprise: DevOps, Workloads and Key Projects 2020

Primary stakeholders beyond developers and IT operations
Q. Beyond developers and IT operations, who are the primary stakeholders in your DevOps implementation? (Choose up to 3)
Source: 451 Research’s Voice of the Enterprise: Voice of the Enterprise: DevOps, 2H 2019

Percentage of DevOps workflow implementations with
security elements
Q. Approximately what percentage of your DevOps workflow implementations include security elements?

Cloud-native technologies and methodologies – critical to
application development and deployment
Q. Which cloud-native technologies and methodologies are most critical to your organization’s application development and deployment processes? Please select all that apply.
Base: All respondents (n=498)

Integration of machine learning models with
application development
Q. At what stage is your organization’s strategy to integrate and align its machine learning models with its application development?

Measuring and proving the business value of DevOps
Q. How do you measure/prove the business value of DevOps implementations? Please select all that apply.

Looking ahead …
12
•Speed, efficiency, readiness
•Hybrid and multicloud
•DevSecOps
•Data-driven
•Across applications
•Additional stakeholders
•Business basis

JFROG AT A GLANCE
2008
Founded
2B dependencies
downloaded/m
3M enterprise
developers daily
Community
Champions
5,600+
Paying Customers
~65%
of the F100
~150 New enterprise
customers monthly
DevOps
Unicorn
Forbes
CLOUD 100 LIST
Deloitte 2019
Technology
Fast 500
Winner
The 2018
SD Times 100
Award

THE JFROG PLATFORM
24/7 Dedicated Support +
DevOps Acceleration Service Arm
BUILD TEST RELEASE DEPLOY
Continuously integrate
automate & deploy
Clear security and
compliance issues
Distribute to
production site
Control and monitor
the ﬂow
On Premises
& Multi-cloud
Store and
manage all
types of
packages
OSS/CE ON PREM / HYBRID
CONSUME
YOUR
WAY:
CLOUD SAAS
</>

THE NEXT DECADES OF DEVOPS
CAN’T BE SERVED BY THIS

END TO END SOLUTION
WITH FREEDOM OF CHOICE

19
KEY CONSIDERATIONS
FOR FUTURE-PROOFING YOUR
DEVOPS SOLUTION

FUTURE PROOFING YOUR DEVOPS STRATEGY
Unify the central
management of the
end-to-end
delivery process +
delivery outcomes
DevSecOps is a MUST!
Shift-left security and
compliance
Cloud-native and
microservices + Legacy
applications in one solution
Make developers happy -
Understand their workﬂows, work via
CLI/API, support robust
pipeline-as-code
Flexibility for
“Hybrid-anything”-
plug-in ANY technology,
stack, point-tools,
process, or
hybrid/multi-cloud
infrastructureDevOps-as-a-Service
at scale: Ensure compliance,
streamline processes, and
simplify management at scale

WHAT WE’RE HEARING
“ Security tests are always such a pain,
that I keep pushing them till the last mile ”
“ I wish I could stop spending my time
babysitting and maintaining our toolchain “
“ I spend almost 50% of my time
copy-pasting CI scripts “
“ Turns out the code I was deploying for
the past year had 62 high-severity CVEs…”
“ As if CI wasn’t cumbersome enough,
CI for Kubernetes apps is hell...”
“ Moving one of our services to a diﬀerent cloud now means
we need to re-factor all of our processes and integrations.”

SWAMPUP.JFROG.COM
AMERICAS EMEA / APAC

Thank You
Contact Us:
451 Research:
US +1 212.505.3030
EUROPE +44 (0) 203.929.5700
S&P Global Market Intelligence:
US +1 877.863.1306
EUROPE +44 (0) 20.7176.1234
451research.com
spglobal.com/marketintelligence
Jay Lyman, Principal Analyst, 451 Research,
S&P Global Market Intelligence
jay.lyman@spglobal.com
Loreli Cadapan, Sr. Director Product
Management, JFrog
lorelic@jfrog.com
25

Permission to reprint or distribute any content from this presentation requires the prior written approval of S&P Global Market Intelligence. 26
Copyright © 2020 by S&P Global Market Intelligence, a division of S&P Global Inc. All rights reserved.
These materials have been prepared solely for information purposes based upon information generally available to the public and from sources believed to be reliable. No content (including index
data, ratings, credit-related analyses and data, research, model, software or other application or output therefrom) or any part thereof (Content) may be modified, reverse engineered, reproduced or
distributed in any form by any means, or stored in a database or retrieval system, without the prior written permission of S&P Global Market Intelligence or its affiliates (collectively, S&P Global). The
Content shall not be used for any unlawful or unauthorized purposes. S&P Global and any third-party providers, (collectively S&P Global Parties) do not guarantee the accuracy, completeness,
timeliness or availability of the Content. S&P Global Parties are not responsible for any errors or omissions, regardless of the cause, for the results obtained from the use of the Content. THE
CONTENT IS PROVIDED ON “AS IS” BASIS. S&P GLOBAL PARTIES DISCLAIM ANY AND ALL EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTIES
OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR USE, FREEDOM FROM BUGS, SOFTWARE ERRORS OR DEFECTS, THAT THE CONTENT’S FUNCTIONING WILL
BE UNINTERRUPTED OR THAT THE CONTENT WILL OPERATE WITH ANY SOFTWARE OR HARDWARE CONFIGURATION. In no event shall S&P Global Parties be liable to any party for any
direct, indirect, incidental, exemplary, compensatory, punitive, special or consequential damages, costs, expenses, legal fees, or losses (including, without limitation, lost income or lost profits and
opportunity costs or losses caused by negligence) in connection with any use of the Content even if advised of the possibility of such damages.
S&P Global Market Intelligence’s opinions, quotes and credit-related and other analyses are statements of opinion as of the date they are expressed and not statements of fact or recommendations
to purchase, hold, or sell any securities or to make any investment decisions, and do not address the suitability of any security. S&P Global Market Intelligence may provide index data. Direct
investment in an index is not possible. Exposure to an asset class represented by an index is available through investable instruments based on that index. S&P Global Market Intelligence assumes
no obligation to update the Content following publication in any form or format. The Content should not be relied on and is not a substitute for the skill, judgment and experience of the user, its
management, employees, advisors and/or clients when making investment and other business decisions. S&P Global keeps certain activities of its divisions separate from each other in order to
preserve the independence and objectivity of their respective activities. As a result, certain divisions of S&P Global may have information that is not available to other S&P Global divisions. S&P
Global has established policies and procedures to maintain the confidentiality of certain non-public information received in connection with each analytical process.
S&P Global may receive compensation for its ratings and certain analyses, normally from issuers or underwriters of securities or from obligors. S&P Global reserves the right to disseminate its
opinions and analyses. S&P Global's public ratings and analyses are made available on its Web sites, www.standardandpoors.com (free of charge) and www.ratingsdirect.com (subscription), and
may be distributed through other means, including via S&P Global publications and third-party redistributors. Additional information about our ratings fees is available at
www.standardandpoors.com/usratingsfees.

A Decade of DevOps: Design Patterns for Future-Proofing Your DevOps Strategy

More Related Content

What's hot (18)

Similar to A Decade of DevOps: Design Patterns for Future-Proofing Your DevOps Strategy (20)

More from DevOps.com (20)

Recently uploaded (20)

A Decade of DevOps: Design Patterns for Future-Proofing Your DevOps Strategy