Category: Tanzu
-
What Broadcom said about using Mythos at Explore 2026
Broadcom has been using Mythos to find and address security vulnerablities since the begining. Here are recent comments about that from Explore 2026.
-
Platform as a Product, 9 years later
Nine years after the platform as a product paper first came out, Caleb Washburn and I went through what changed. The answer is mostly “not much,” and the good bit is why developers keep asking for Kubernetes clusters they don’t actually want.
-
Six to eight weeks, down to two days – How Tanzu Product Management Uses AI
I talked with Chris McClanahan and Purnima Padmanabhan about how the Tanzu product management team actually put AI to work. Ideation went from six to eight weeks to a couple of days, and almost none of what got them there was tooling. It was org chart work: one pod instead of hand-offs, onboarding the AI…
-
What’s up with these AI jailbreaks and security breaches?
Check the rest of our conversation on last week’s Tanzu Catsup.
-
Using frontier models to find security problems in Spring Framework – a trickle turned into a tidal wave
“In March, we saw 55 reports coming from the community. In April, that went to 112. April is also when we finally got access to those frontier models and started doing internal scanning, and our internal scans gave us another 370 internal reports.” Michael Minella on the Spring Team. The historical baseline was about seven…
-
Not my mistake, now my problem
I’m often told infrastructure people don’t care about developers and platforms. But whatever your developers build above your infrastructure is a platform and they’ll soon flit away from it, and now for you it’s: not my mistake, and now my problem. There’s more in the full talk Oren and I gave recently, Oren goes over…
-
AI won’t fix your broken culture, but you can fix your broken culture
AI amplifies what you have: good processes get faster, bad ones get worse. Getting real enterprise AI ROI means changing how you work – structure, focus, scope.
-
Talk: VCF + Tanzu Platform = The Private Cloud Enterprises Actually Needs – June 25th, 2026
I’m doing a Global VMUG session with Oren Penso this Thursday, June 25th, 5:40pm CEST. Virtual, free. Title: “VCF + Tanzu Platform = The Private Cloud Enterprises Actually Needs.” The abstract: VMware Cloud Foundation 9 brings modern infrastructure to your private cloud. Tanzu Platform layers on as the application platform layer – giving developers PaaS…
-
Platform as a Product, 2017 to 2026 – not much changed, which is the point
The Platform as a Product paper, first published in 2017 and updated for 2026. The concept survived Pivotal, the platform engineering category, and kubernetes blocking out the sun for five years.
-
How AI change your software development organization
A catch-up with Purnima Padmanabhan, GM of the Tanzu Division at Broadcom, on what her team has actually learned shipping enterprise software with AI for the last year and a half: code generation is the small part, beautiful code is the new uncanny valley, and you cannot solve the agent boundary problem from inside the…
-
Patching CVEs at AI speed is a platform engineering problem
AI-assisted vulnerability discovery cut the gap from CVE published to weaponized exploit from weeks to hours. Quarterly patch windows and hand-rolled CVE spreadsheets are no longer a defensible posture.
-
Now you can react faster than ever to security problems
This is an excerpt from our Tanzu Catsup last week. In that episode we talked all about how this AI stuff is changing – for the better – how you can handle security problems at the app layer. It’s Monday morning. Your boss walks up, says “scrap the backlog, we’ve got a list of CVEs…
-
VMware Cloud Foundation 9.1 – private cloud, private AI, enterprise-grade kubernetes
Our cousins over in VMware announced the most recent version of VMware Cloud Foundation, 9.1, yesterday. We all call this “VCF.” It’s at the center of Broadcom’s strategy to be the private cloud stack for large enterprises. You know: banks, governments, large retailers, manufactures, et. al. Our layer, the Tanzu Platform, sits a-top VCF like…
-
Treat AI as a stoner
The right mental model for working with an AI, according to my co-host David. If you’ve spent any real time with an AI, you know exactly what he means. The model can do impressive work in a tight scope. Step out of that scope, or feed it more than fits, and you’re suddenly explaining the…
-
Tanzu Platform 10.4 Source Coverage
Here’s coverage of our recent Tanzu Platform 10.4 announcements. This is a big agentic AI release, bringing in to Tanzu Platform all sorts of features to secure, standardize, and otherwise make agentic AI work more enterprise-y. My think on 10.4 is listed below too. There’s also the short video I made on the 10.4: Tanzu…
-
Tanzu Platform 10.4: a private cloud platform for AI harnesses (or, “agentic AI”)
AI companies are building platforms for running agentic applications. Right now, those applications are primarily for software development, with a little bit of knowledge worker stuff. In each case, you get a “harness,” an application that wraps all sorts of functionality around a model. This harness app is way beyond the chat-based apps we grew…
-
What cf push actually does
When I see a platform engineering conference talk about building an internal developer platform on Kubernetes, I think about cf push. Cloud Foundry has been doing this – the actual thing, the single command that takes you from source code to running app – for more than a decade. People keep rebuilding it on top…
-
Don’t forget what I told you yesterday – AI memory and the mind palace – Tanzu Catsup
If you’ve spent any real time with Claude Code or Cursor, you know the feeling. The thing you told the agent five minutes ago is now optional as far as it’s concerned. The fix isn’t a smarter model. It’s architecture. This week David Zendzian and I dig into memory for AI agents – what it…
-
Securing AI
More “how do we secure this AI stuff” talk with David Zendzian on today’s live stream. He’s recently gone Claude Crazy so I wanted to get his CISO-supremo talk on thinking through the risk management for AI in enterprises. Each time I tried to come up with a problem, he was good finding the fix.…
You must be logged in to post a comment.