Tools & Services Finalists

Motive's implementation of Rootly cut incident setup from 15-60+ minutes to seconds and replaced Opsgenie and custom bots with Rootly On-Call to support 99.99% reliability, led by customer exec Paul van Liew, Director of Platform Engineering at Motive.

By consolidating separate repository tools and scanners across 15,000+ developers and 80-plus global plants onto the JFrog Platform, Ford gained a single pane of glass view for IT and security teams and recaptures an estimated $7.88 million a year in developer productivity.

Nedbank transformed mainframe delivery into a continuously evolving DevOps capability, reducing deployment cycles by 75% while expanding automation, quality controls, and developer enablement.

Rocket® DevOps, from Rocket Software, a global technology leader in enterprise modernization, is an end-to-end CI/CD solution that helps organizations modernize IBM i application development, automate workflows, strengthen security and accelerate software delivery without disrupting mission-critical operations.

Sonatype Nexus Repository is a trusted repository for managing and delivering the components that developers, CI/CD pipelines, and AI agents need to build software.

Eclipse Theia AI is an open source, vendor-neutral framework for building tailored AI-assisted development tools and IDEs, with control over models, agents, data, integrations, and user experience.

Gitar, Sonar’s AI code change verification agent, helps teams ship code with confidence at agentic speed by taking pull requests beyond review to fixes verified through CI.

Available in Sonatype Guide, Agent P automates dependency management within your AI coding assistant, helping teams keep open source dependencies up to date.

Copilot4DevOps is an AI application built natively inside Azure DevOps that turns requirements and work items into reviewable, publishable deliverables without leaving the tool teams already use.

Planview Anvi™ is an enterprise AI solution that’s purpose-built to connect strategic priorities to on-the-ground delivery, providing the data-driven insights and workflow automations organizations need to accelerate decision-making, streamline execution, and improve outcomes

An end-to-end AI-driven DevOps solution for IBM Z that streamlines software delivery from planning to production by automating key development and pipeline processes to boost productivity, shorten release cycles, improve quality, and accelerate application modernization while maintaining governance, security, and resilience.

Kilo Desktop gives builders native access to more than 500 AI models, agentic coding and data science workflows that plan before they build, and built-in management of local models and conda environments.

Coder Agents runs autonomous, model-agnostic coding agents on self-hosted infrastructure, triggered by chat or API, that plan, execute and verify multi-step development work end to end.

Eclipse LMOS is an open source, vendor-neutral platform for defining, deploying, orchestrating, and scaling enterprise multi-agent systems across cloud and on-premises environments.

SonarQube builds code confidence into agentic software factories through independent code verification and governance, helping enterprises confidently ship what their agents build.

Harness Software Delivery Agent carries code from commit to production, and its Autonomous Worker Agents run as governed pipeline steps that diagnose failures, fix code and infrastructure, and verify deployments, with every action audited.

The Komodor Agentic Operations Platform coordinates pre-built and custom AI agents to autonomously investigate software delivery and production issues, determine corrective actions, execute approved remediation, and verify results across Kubernetes, cloud infrastructure, CI/CD and observability systems.

AI Observability in Grafana Cloud monitors and evaluates LLM-powered apps and agents by tracking their inputs, outputs, and execution flows in real time.

AURA is an Apache 2.0 open-source SRE agent harness that lets teams run coordinated agents for production workflows using their own models, tools, and infrastructure.

Teleport Beams is a trusted runtime for securing AI agents in production infrastructure, giving each agent an isolated, expiring environment with delegated identity, policy-controlled connections, no static secrets, and a full audit record.

JFrog treats AI models, MCP servers, skills and plugins as first-class software assets, giving enterprises scanning, policy enforcement and prompt-to-release traceability across the agentic software supply chain.

AgentControl is built specifically to solve the increasingly common rogue agent issue, combining real-time intervention with the governance, benchmarking, and release controls teams need to run agents the way they've learned to run code - safely, and with an emergency brake that actually works.

Coder AI Governance centralizes model access, spend controls, auditing and network policy for AI coding agents, so enterprises can operate agents as governed, observable workloads on infrastructure they control.

Harness, the platform for the Autonomous SDLC, treats models and agents as governed artifacts on the same platform that already delivers enterprise software.

Phison’s Pascari aiDAPTIV ™ breaks through AI memory limitations by combining intelligent memory management with high-endurance flash, enabling developers and enterprises to deploy larger AI models, longer-running agentic workflows and private AI applications on more accessible hardware.

Gremlin is a proactive AI-driven reliability platform.

Red Hat Developer Hub is an agent-ready developer portal powered by CNCF’s Backstage project that gives developers and AI agents the self-service workflows and enterprise context to build, deploy, and run applications aligned with organizational standards.

Harness gives developers and AI agents governed, self-service golden paths across the software lifecycle, unifying service discovery, infrastructure provisioning, software delivery, security, and shared SDLC context so platform teams can enable more engineering work without adding tickets, custom tooling, or manual oversight.

Liquibase Secure enables automated and governed database self-service, allowing developers to deliver database changes through standardized workflows while platform teams maintain enterprise security, compliance, and operational controls.

BMC AMI zAdviser Enterprise combines mainframe delivery telemetry with source-code analysis to show where delivery slows, which programs carry risk, and where critical knowledge is concentrated.

A single unified API, now also available over MCP, that replaces hundreds of separate integrations with one interface to data from 500+ dental and healthcare practice management systems.

Harness Software Delivery Agent moves application, infrastructure, and database changes from commit to production through a governed pipeline, with fast feedback, automatic verification and rollback, and policy enforced at every step.

BMC AMI DevX Code Pipeline brings governed SCM and CI/CD to mission-critical apps: parallel development on shared programs, automated build and deployment, and on-demand fallback.

Liquibase Secure brings database change into enterprise CI/CD pipelines with automated deployments, policy enforcement, and governance that helps organizations deliver software faster without increasing operational risk.

TestSprite is an autonomous AI testing agent that generates, runs, and maintains end-to-end frontend and backend tests, giving development teams and AI coding agents a continuous quality check on every change.

Managed software testing services from Applause combine insights from the world’s largest testing community with AI and automation, giving DevOps teams the expertise, resources and real-world confidence they need to release high-quality apps and websites efficiently — at the speed and scale required in today’s highly competitive market.

Testkube is a testing platform that gives teams one place to create, orchestrate, execute and analyze any test in their existing infrastructure, working with any testing tool and any framework, decoupled from CI/CD pipelines and built on an open source core.

Parasoft helps enterprises scale AI-driven testing with reusable low-code/no-code test assets, standardized testing infrastructure, and test impact analysis that keeps regression test execution focused on recent code changes.

The Teleport Infrastructure Identity Platform improves engineering velocity and infrastructure resiliency by establishing a unified identity layer for humans, machines, workloads and AI agents that is cryptographically secured, grants ephemeral, just-in-time privileges with no standing access, and extends identity and access control to agents and MCP tooling through a trusted, ephemeral runtime, making every human, machine, and agentic action auditable and governed.

JFrog secures the AI-era software supply chain from network edge to production by curating every package developers and agents pull and automatically applying trusted fixes, cutting remediation time from days to hours.

Progress Chef 360 is a unified DevSecOps platform for automating, orchestrating and governing infrastructure and compliance across hybrid, multi-cloud, on-premises and air-gapped environments.

Harness’s Software Delivery Agent takes every code change safely to production, the Security Testing Agent finds and fixes risk before it ships, and one governed foundation makes security part of everyday delivery.

Orca Security’s Cloud Native Application Protection Platform (CNAPP) is an AI-first, agentless-first platform that gives organizations a unified way to secure the applications they build and the cloud environments where those applications run by bringing together cloud workload protection, vulnerability management, application security, and risk visibility across configurations, identities, data, and AI systems.

Mend.io is an AI-native application security platform that secures modern software across code and AI from development through runtime, protecting proprietary code, open-source dependencies, containers, AI-generated code, models, agents, and system prompts while using contextual risk prioritization and AI-powered remediation to help security and development teams focus on critical risks, reduce remediation effort, and build, deploy, and operate AI-powered applications securely at scale.

Liquibase Secure brings enterprise security and compliance into database change workflows, helping organizations enforce policies, prevent risky changes, and maintain proof of control throughout software delivery.

CleanStart secures the software supply chain by helping organizations govern open-source components, build security-hardened software artifacts, verify their integrity and provenance, and discover deployed software assets.

The JFrog Software Supply Chain Platform is a single system of record that blocks risky components, finds exploitable vulnerabilities and automatically applies trusted fixes across software and AI assets at every stage of delivery.

SonarQube Advanced Security helps teams ship more secure software with confidence by identifying risks introduced with their third-party and open source dependencies, helping enforce security standards before release, and providing a record of findings and risk decisions.

Rootly is the AI-native reliability platform that keeps the world's software reliable: on-call, incident response, AI SRE and status pages in one place, engaging the right people, investigating, keeping customers informed and turning every incident into learning.

Grafana Cloud is the fully managed, open-standards-based observability platform that more than 10,000 organizations — including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce — rely on to see, understand, and act on metrics, logs, traces, and profiles at scale.

Progress WhatsUp Gold NDR is a comprehensive observability platform that delivers end-to-end visibility across network, system, application and cloud environments, enabling teams to detect issues early, accelerate troubleshooting and improve operational reliability.

1000X more storage than traditional tools, retained 12 months always hot

Prevent IBM i issues before they become costly outages.

Virtana, provider of the deepest and broadest Agentic Observability Platform, gives AI agents the full-stack context to diagnose root cause and automate remediation under enterprise-defined policies across applications, infrastructure, cloud and AI factories, helping Global 2000 enterprises and public sector organizations reduce downtime, lower costs and strengthen operational resilience.

Mezmo Governance (currently in closed-beta) lets SRE teams define and test policies that control how their agents operate within production workflows, regardless of which agents they use.

Adaptive Telemetry is a Grafana Cloud feature suite that automatically identifies which metrics, logs, traces, and profiles are actually used, then aggregates or drops the rest, cutting telemetry costs by up to 80% without teams having to manually tune what they send.

Harness Cost Management Agent is an AI-native agent that attributes, optimizes, and governs cloud, AI, and engineering spend, tying cost to the team, pull request, and business outcome behind it, at the autonomy level the customer chooses.

Coder Agents is a fully self-hosted, model-agnostic AI coding agent that runs orchestration and execution on infrastructure the enterprise controls, including air-gapped environments.

Dstl8 distills runtime telemetry at the source, and routes cited diagnoses from its own custom model to the AI coding agent or engineer who shipped the code, with zero alert rules to write.

Allstacks Product Studio is an AI product management workspace whose agents help product teams decide what to build, define it so engineering builds the right thing, and measure its impact after release. Every recommendation is grounded in the organization's deep and broad context across strategy and market research, customer feedback, documentation, code, and delivery history.

LucidLink Developer Tools enable developers to build applications, automated pipelines and AI agents that securely read and write shared enterprise files alongside people, without requiring a desktop client, separate working copies or complex file synchronization.

CodeHunter introduced Zero Trust for Code, a pre-execution security platform that independently verifies what AI-generated and developer-written software can do, with automated integration into AI-assisted development workflows such as Claude Code.

Splunk Agent Observability helps AI engineering teams build trust in AI by evaluating, observing and controlling agent behavior and token costs.

Checkmarx Fusion combines two decades of application security research, deterministic precision, frontier AI reasoning, and intelligent findings validation to deliver the most complete vulnerability detection available across languages, codebases, and the software development lifecycle.

Liquibase Secure Change Intelligence gives enterprises a centralized view of database change activity, helping teams identify risk, detect drift, investigate failures, and improve delivery performance across their database environments.

NeuBird's Production Ops Agent prevents incidents, resolves them with root cause in under five minutes at 94% accuracy and operates production between them, running on the Agentic Reliability Center (ARC), a governed platform where every action waits for an engineer's approval.