Tag: tanzu
-
Patching CVEs at AI speed is a platform engineering problem
AI-assisted vulnerability discovery cut the gap from CVE published to weaponized exploit from weeks to hours. Quarterly patch windows and hand-rolled CVE spreadsheets are no longer a defensible posture.
-
Now you can react faster than ever to security problems
This is an excerpt from our Tanzu Catsup last week. In that episode we talked all about how this AI stuff is changing – for the better – how you can handle security problems at the app layer. It’s Monday morning. Your boss walks up, says “scrap the backlog, we’ve got a list of CVEs…
-

VMware Cloud Foundation 9.1 – private cloud, private AI, enterprise-grade kubernetes
Our cousins over in VMware announced the most recent version of VMware Cloud Foundation, 9.1, yesterday. We all call this “VCF.” It’s at the center of Broadcom’s strategy to be the private cloud stack for large enterprises. You know: banks, governments, large retailers, manufactures, et. al. Our layer, the Tanzu Platform, sits a-top VCF like…
-
Tanzu Platform 10.4 Source Coverage
Here’s coverage of our recent Tanzu Platform 10.4 announcements. This is a big agentic AI release, bringing in to Tanzu Platform all sorts of features to secure, standardize, and otherwise make agentic AI work more enterprise-y. My think on 10.4 is listed below too. There’s also the short video I made on the 10.4: Tanzu…
-

Tanzu Platform 10.4: a private cloud platform for AI harnesses (or, “agentic AI”)
AI companies are building platforms for running agentic applications. Right now, those applications are primarily for software development, with a little bit of knowledge worker stuff. In each case, you get a “harness,” an application that wraps all sorts of functionality around a model. This harness app is way beyond the chat-based apps we grew…
-
Platform engineering is what makes AI enterprise-ready
As we’ve found, writing AI-powered software is the easy part. Testing it, securing it, operating it at enterprise scale – that’s where things get interesting. “Guardrails,” all that. Purnima lays this out: a shift from deterministic systems (input goes in, predictable output comes out) to probabilistic ones where agents wander around exploring multiple paths to…
-
Does Platform Product Management & Design Really Happen? Or is it all just platform engineering? – Tanzu Catsup
Most organizations treat infrastructure as a series of projects to be “completed,” but successful platform engineering requires a permanent product mindset. In this episode, we explore why platform teams need dedicated product management to balance competing priorities—like security, cost, and developer experience—and why the “why” scales much better than the “what” in large enterprises. We…
-
Tanzu Catsup: The Risk of Relying on AI for Platform Engineering
Internal development teams and executives are increasingly looking at AI to automate the creation of internal developer platforms. However, cobbling together open-source components with AI is a far cry from building a scalable, secure, and “enterprise-grade” environment. In this conversation, we explore why betting your internal infrastructure on AI-generated platforms is a high-stakes risk and…
-
How much does it cost to build an internal developer platform? – Tanzu Catsup
This week’s Tanzu Catsup is about how much you need to pay people to build your own internal developer platform: I think building your own platform is a terrible idea, especially for larger organizations. My co-host Tony ran the platform for Home Depot and now talks with other platform teams a lot, so I wanted…
-
This week’s Tanzu Catsup: AI tools have solved code generation, probably. But they’ve created a new constraint: Day 2 operations. When the volume of applications jumps 10x driven by a flood of “small” line-of-business apps manual “run teams” and traditional onboarding processes break down. Hey guys! Like and subscribe.
-
Discounts for VMware and Tanzu software: Under this new agreement, [US] agencies can purchase select Broadcom software solutions at a 64% discount off the list price. These offers are valid until May 2027 across the portfollo” 🔗 New U.S. GSA and Broadcom OneGov Agreement to Help Accelerate Federal Agency AI and Security Initiatives
-
“Since we started using Application Advisor, we’ve seen a 70% reduction in engineering time tied to upgrades,” says Roberts. “Now we can focus more of our time and resources on the delivery of new value-added features for our customers.” 🔗 Alight Removes Roadblocks for App Innovation with VMware Tanzu Spring [PDF]
-
I wasn’t really sure what hardned images were, let alone “distroless,” so Tony and I were lucky to get William on this week’s Tanzu Catsup to sort it out. We also discuss how it fits into platform engineering.
-

Adding security and governance to Model Context Protocol – How Broadcom uses MCP
Here’s the benefits Broadcom is getting from using MCP (running on Tanzu Platform): This capability allows for seamless task completion, such as linking internal ticketing systems directly through to code commitment, significantly reducing the time required for ticket resolution. Specifically, developers can utilize natural language processing to direct an AI agent to find their next…
-
Use yours secrets to get generative AI ROI
From an article by my colleagues and me: For generative AI (GenAI) apps to deliver real business value, they need access to your company’s proprietary data. Without it, models default to the public data they were trained on–meaning you get the same generic ideas as your competitors. If everyone is starting with the same new…




You must be logged in to post a comment.