Category: Tanzu
-
Platform as a Product, 2017 to 2026
I updated our Platform as a Product paper recently, available here as a PDF. This paper has a long history: it was first published in 2017, updated in 2018, and then 2021. The concept was core to Pivotal Software – both in Pivotal Labs and with Pivotal Cloud Foundry. After Humanitec killed DevOps, around 2022,…
-
How AI change your software development organization
A catch-up with Purnima Padmanabhan, GM of the Tanzu Division at Broadcom, on what her team has actually learned shipping enterprise software with AI for the last year and a half: code generation is the small part, beautiful code is the new uncanny valley, and you cannot solve the agent boundary problem from inside the…
-
The AI Security freak-out: now is the time for platform engineering to shine
The AI-driven security freak-out is a time to see what if your platform engineering strategy is working. A good platform makes it possible – if not easy – to find and patch all these new CVEs. And, of course keep patching them. A good platform will keep track of all these apps and dependencies deployed…
-
Now you can react faster than ever to security problems
This is an excerpt from our Tanzu Catsup last week. In that episode we talked all about how this AI stuff is changing – for the better – how you can handle security problems at the app layer. It’s Monday morning. Your boss walks up, says “scrap the backlog, we’ve got a list of CVEs…
-
VMware Cloud Foundation 9.1 – private cloud, private AI, enterprise-grade kubernetes
Our cousins over in VMware announced the most recent version of VMware Cloud Foundation, 9.1, yesterday. We all call this “VCF.” It’s at the center of Broadcom’s strategy to be the private cloud stack for large enterprises. You know: banks, governments, large retailers, manufactures, et. al. Our layer, the Tanzu Platform, sits a-top VCF like…
-
Treat AI as a stoner
The right mental model for working with an AI, according to my co-host David. If you’ve spent any real time with an AI, you know exactly what he means. The model can do impressive work in a tight scope. Step out of that scope, or feed it more than fits, and you’re suddenly explaining the…
-
Tanzu Platform 10.4 Source Coverage
Here’s coverage of our recent Tanzu Platform 10.4 announcements. This is a big agentic AI release, bringing in to Tanzu Platform all sorts of features to secure, standardize, and otherwise make agentic AI work more enterprise-y. My think on 10.4 is listed below too. There’s also the short video I made on the 10.4: Tanzu…
-
Tanzu Platform 10.4: a private cloud platform for AI harnesses (or, “agentic AI”)
AI companies are building platforms for running agentic applications. Right now, those applications are primarily for software development, with a little bit of knowledge worker stuff. In each case, you get a “harness,” an application that wraps all sorts of functionality around a model. This harness app is way beyond the chat-based apps we grew…
-
What cf push actually does
When I see a platform engineering conference talk about building an internal developer platform on Kubernetes, I think about cf push. Cloud Foundry has been doing this – the actual thing, the single command that takes you from source code to running app – for more than a decade. People keep rebuilding it on top…
-
Don’t forget what I told you yesterday – AI memory and the mind palace – Tanzu Catsup
If you’ve spent any real time with Claude Code or Cursor, you know the feeling. The thing you told the agent five minutes ago is now optional as far as it’s concerned. The fix isn’t a smarter model. It’s architecture. This week David Zendzian and I dig into memory for AI agents – what it…
-
Securing AI
More “how do we secure this AI stuff” talk with David Zendzian on today’s live stream. He’s recently gone Claude Crazy so I wanted to get his CISO-supremo talk on thinking through the risk management for AI in enterprises. Each time I tried to come up with a problem, he was good finding the fix.…
-
MCP Security Guide
My pal Adib Saikali wrote up an MCP security guide covering how to think about securing MCP servers in the enterprise (no lead-generation required, just a straight-up PDF download). It gets into access tiers (open, group, and user-level servers), authentication with OAuth 2.1, identity propagation models (when to use service accounts vs. forwarding user identity),…
-
VMware/Broadcom at KubeCon EU 2026
Here’s Claude’s take on VMware’s stuff at KubeCon – just some light editing for me. KubeCon + CloudNativeCon Europe 2026 ran March 23-26 in Amsterdam. Here’s what VMware by Broadcom announced. VKS 3.6 Ships The VKS stack as seen at VMUG Connect Amsterdam 2026. VMware vSphere Kubernetes Service 3.6 shipped with Kubernetes 1.35 support, RHEL…
-
Does Platform Product Management & Design Really Happen? Or is it all just platform engineering? – Tanzu Catsup
Most organizations treat infrastructure as a series of projects to be “completed,” but successful platform engineering requires a permanent product mindset. In this episode, we explore why platform teams need dedicated product management to balance competing priorities—like security, cost, and developer experience—and why the “why” scales much better than the “what” in large enterprises. We…
-
Developers crave AI tools for various tasks beyond coding, but that’s only about 20% of their work. But, ops people freak out about security and control challenges, like cost, regulatory compliance, and usage tracking.
-
Bad advice from Wall Street on enterprise AI.
-
Why it’s great to be a Spring developer now, and how to make it even better – State of Spring, 2026
This is a talk I give at the start of Spring workshops we do. Here is the recording. The point is to show people that being a Java and Spring developers is fantastic right now. Here’s the description: Spring developers are in a strange position in 2026: everything is changing: AI, platform engineering, enterprise architecture.…
-
Your Boss Doesn’t Know What to Do With AI Enterprise AI Has a Product-Market Fit Problem. Enterprise AI isn’t stalled because the models are weak. It’s stalled because we haven’t discovered product-market fit inside the enterprise yet. You don’t find real AI value by theorizing in workshops. You find it by running experiments for months…
-
Enterprise AI needs new apps, enterprise AI doesn’t need new platforms
For your enterprise AI projects, what you want now is resilience. I’m using that term from a paper called “AI as a Normal Technology.” There, resilience means ” taking actions now to improve our ability to deal with unexpected developments in the future.” There’s a lot of great thinking in that paper, but I want…
-
The weird bastion stuff in D&D 5e 2024 makes a lot more sense after reading Dungeon Crawler Carl.
You must be logged in to post a comment.