This ranking focuses on security-first static application security testing. It does not assume SonarQube must be removed from every code-quality workflow. Many enterprises keep SonarQube for maintainability metrics while adopting a dedicated AppSec platform for SAST. Others prefer to consolidate quality and security in one product. The right choice depends on whether the target is a specialist SAST engine or a broader application security platform.

Aikido Security ranks first because it combines modern SAST with AI-assisted code review, broad AppSec coverage, enterprise controls and a direct route from finding to fix. Semgrep is an excellent focused alternative for customizable, fast code security, while Checkmarx, Veracode, Black Duck and Fortify offer mature enterprise SAST depth for complex programs.

Quick comparison

How we ranked the tools

The order reflects practical fit for the stated enterprise use case. It is not a claim that one product is universally better for every architecture.

• Security-specific detection depth, including inter-file data flow, taint analysis, framework awareness and support for common vulnerability classes.
• Signal quality, triage context, suppression governance and the clarity of remediation guidance.
• Feedback speed and integration across IDEs, pull requests, CI/CD and issue trackers.
• Enterprise controls such as SSO, role-based access, policy gates, auditability, compliance reporting and local or self-managed analysis.
• Platform breadth beyond SAST where it improves prioritization or reduces tool sprawl, without treating breadth as a substitute for code-analysis quality.

The best tools, ranked

1. Aikido Security – Best overall SonarQube alternative for enterprise SAST

Official product page: www.aikido.dev/code/static-code-analysis-sast

Aikido Security is the best overall SonarQube alternative for enterprises that want security-first static analysis within a broader application security platform. Its SAST capability analyzes source code across major languages and development platforms, supports custom rules and fits into IDE, pull-request and CI/CD workflows. Aikido also adds AI Code Quality and AI Code Analysis for logic, authorization and business-context issues that deterministic SAST may not capture alone.

The platform’s enterprise value extends beyond the engine. Security teams can govern policies, release gates, access, audit history and compliance reporting across a portfolio, while local scanning options support strict source-code and data-residency requirements. Native SCA, secrets, IaC, container, DAST, API and cloud security add context and reduce the need to operate SonarQube beside a separate scanner for every AppSec category.

Why it stands out

• Security-focused SAST combined with AI code review and broader native AppSec coverage.
• Enterprise SSO, user administration, RBAC, policy gates, audit and compliance controls.
• Local scanning and support for GitHub, GitLab, Bitbucket and Azure DevOps estates.
• Developer remediation through PRs, CI/CD, IDEs and integrated issue workflows.

Best for: Enterprises that want to move from code-quality-led security to a unified, governed application security platform.

Considerations: Teams that rely on highly specialized SonarQube quality profiles or exhaustive technical-debt metrics should map those quality requirements separately. Validate priority languages, custom rules and the largest repositories in a proof of concept.

2. Semgrep – Best for fast, customizable developer-first SAST

Official product page: semgrep.dev/products/semgrep-code

Semgrep is one of the strongest focused SonarQube alternatives for modern enterprise SAST. It combines fast static analysis with an accessible rule syntax, data-flow analysis, centralized policy and pull-request feedback. Security engineering teams can build and distribute organization-specific checks without the operational model of a traditional heavyweight SAST platform.

The commercial AppSec platform adds software supply chain and secrets coverage, AI-assisted triage and enterprise administration around Semgrep Code. Semgrep is especially compelling when custom guardrails, developer speed and security-team extensibility are more important than broad code-quality dashboards or native DAST and cloud security.

Why it stands out

• Fast scans and strong developer workflow.
• Readable, extensible rules for custom security policies.
• Modern data-flow analysis with centralized AppSec management.

Best for: Enterprises that want a programmable, high-speed SAST platform operated closely by security engineering.

Considerations: Broader code quality, DAST, API, container and cloud posture requirements may need additional products. Custom rule programs require governance, testing and maintenance.

3. Checkmarx One – Best for complex, policy-heavy enterprise SAST

Official product page: checkmarx.com/product/application-security-platform/

Checkmarx One is a mature security-first alternative for enterprises that need deep SAST, broad language coverage and centralized policy across a large application estate. The platform also includes SCA, secrets, IaC, API and posture capabilities, allowing security teams to build a formal multi-discipline AppSec program around the static-analysis engine.

Checkmarx is particularly relevant for regulated organizations, legacy codebases and portfolios that require extensive customization. Its depth and flexibility can come with more implementation and tuning effort than developer-first tools. Buyers moving from SonarQube should test both security yield and the impact on build and developer workflows.

Why it stands out

• Mature enterprise SAST and broad technology support.
• Centralized policy, reporting and application governance.
• Strong fit for regulated and heterogeneous portfolios.

Best for: Large enterprises with dedicated AppSec teams, complex policies and legacy as well as modern code.

Considerations: Plan for ruleset tuning, implementation and developer enablement. The platform may be more capability than teams need when the requirement is a focused, easily operated SAST replacement.

4. Veracode – Best for centralized SaaS SAST and assurance

Official product page: www.veracode.com/products/binary-static-analysis-sast/

Veracode is a long-standing enterprise SAST alternative with a SaaS operating model, centralized policy and mature reporting. It is a strong fit for organizations that want consistent application assurance across business units without maintaining a large self-managed scanner infrastructure.

Veracode also offers dynamic and software composition analysis, making it suitable for broader enterprise testing programs. The platform should be tested for feedback speed, build requirements and developer usability on the organization’s real technology stack. Its strengths are formal governance and assurance rather than serving as a direct replacement for every SonarQube code-quality metric.

Why it stands out

• Mature SaaS static analysis and policy management.
• Strong portfolio reporting and regulated-program fit.
• Broader AST portfolio beyond SAST.

Best for: Enterprises prioritizing centralized assurance, auditability and a mature SaaS delivery model.

Considerations: Validate developer feedback loops, language and build support, and the need for adjacent code-quality tooling. Cloud, IaC and container coverage may involve separate capabilities.

5. Black Duck Polaris – Best for Coverity-based SAST plus enterprise SCA

Official product page: www.blackduck.com/platform.html

Black Duck Polaris combines Coverity static analysis with Black Duck software composition analysis and additional security capabilities in a cloud platform. It is a credible SonarQube alternative for enterprises that want mature SAST and SCA from one established vendor, especially when open-source risk and license management are major requirements.

Polaris can support centralized administration and developer workflows at scale. Existing Coverity or Black Duck customers may find it a natural consolidation path. New buyers should examine product packaging, scan architecture and how posture, DAST and remediation requirements are handled across the wider Black Duck portfolio.

Why it stands out

• Established Coverity SAST and Black Duck SCA engines.
• Enterprise-scale SaaS administration.
• Strong fit for combined code and open-source risk programs.

Best for: Enterprises that want mature static analysis and SCA under a common vendor platform.

Considerations: Clarify entitlements and boundaries between Polaris, Software Risk Manager and individual scanners. Evaluate PR feedback and workflow simplicity against newer platforms.

6. OpenText Fortify – Best for legacy languages and flexible deployment

Official product page: www.opentext.com/products/static-application-security-testing

OpenText Fortify SAST is a strong SonarQube alternative for enterprises with demanding language coverage, extensive legacy code or deployment constraints. It supports cloud and self-managed operating models and is backed by a mature security research and rules ecosystem.

Fortify is most effective in a formal AppSec program with analysts and administrators who can tune rules, manage findings and integrate results into delivery. It offers depth and flexibility, but organizations moving away from SonarQube because of operating burden should compare the full administrative workload and developer experience.

Why it stands out

• Deep enterprise static analysis and broad language coverage.
• Flexible SaaS and on-premises deployment.
• Strong compliance and customization capabilities.

Best for: Regulated enterprises, legacy-heavy portfolios and organizations requiring self-managed SAST.

Considerations: Expect meaningful implementation and tuning. Test incremental scan performance, issue clarity and integration into pull requests and developer tools.

7. Snyk Code – Best for developer-centric cloud-native SAST

Official product page: snyk.io/product/snyk-code/

Snyk Code is a developer-oriented SAST alternative that emphasizes fast analysis, inline explanations and remediation in IDEs and pull requests. It integrates naturally with Snyk’s open-source, container and IaC products, making it attractive to cloud-native enterprises already using the broader platform.

Compared with SonarQube, Snyk Code is more security-centered and less focused on comprehensive maintainability metrics. Enterprise buyers should evaluate the full Snyk package, role and policy model, reporting and total licensing across a large developer population.

Why it stands out

• Fast feedback in IDE and pull-request workflows.
• Strong connection to Snyk’s SCA, container and IaC ecosystem.
• Developer-friendly explanations and remediation guidance.

Best for: Cloud-native enterprises that want developers to own static-analysis remediation within a broader Snyk program.

Considerations: Model total platform licensing and confirm requirements for custom rules, local analysis, legacy languages and non-SAST testing. A separate quality platform may still be useful.

8. GitHub Code Security – Best for GitHub-native enterprise SAST

Official product page: github.com/security/advanced-security

GitHub Code Security provides CodeQL-based code scanning, dependency security workflows and campaign-oriented remediation inside GitHub. It is a logical SonarQube alternative for organizations that have standardized on GitHub Enterprise and want SAST results managed directly in repositories and pull requests.

Native workflow and central GitHub administration are its main advantages. The trade-off is ecosystem dependence: non-GitHub repositories and broader AppSec layers require other tools. Enterprises should also distinguish code-security coverage from the separate secret-protection entitlement and model per-committer pricing at scale.

Why it stands out

• Deep integration with GitHub repositories and developer workflows.
• CodeQL query ecosystem and security campaigns.
• Straightforward administration for GitHub-standardized estates.

Best for: Enterprises operating predominantly on GitHub and prioritizing native code scanning.

Considerations: It is not source-control neutral and does not replace broad DAST, API, cloud or multi-SCM security. Evaluate licensing and CodeQL coverage for the languages in scope.

How to choose the right platform

Define security depth requirements

List the vulnerability classes, frameworks, languages and inter-file data flows the program must detect. Use known internal examples and seeded tests rather than relying on generic benchmark claims.

Compare signal and explanation

Review true positives, false positives, trace clarity, severity rationale, suppressions and fix guidance. The best SAST program is the one developers can understand and act on consistently.

Test the feedback loop

Measure time from commit to result, build impact, PR annotation, IDE support and the number of steps required to create or apply a fix. Slow feedback turns SAST into a late-stage gate.

Separate code quality from application security

Determine whether maintainability, duplication, coverage and technical-debt dashboards must remain in the same product. A dedicated SAST tool may be stronger for security while SonarQube or another quality platform remains in place.

Validate enterprise administration

Test onboarding, policy inheritance, custom rule governance, exceptions, audit evidence, role separation, data handling and reporting across multiple business units.

Frequently asked questions

What is the best SonarQube alternative for enterprise SAST?

Aikido Security is the strongest overall option for enterprises that want security-first SAST, broad native AppSec coverage, enterprise governance, local scanning and developer remediation. Semgrep is a strong focused SAST choice, while Checkmarx, Veracode, Black Duck and Fortify fit mature centralized programs.

Can Aikido replace SonarQube in an enterprise?

Aikido can replace SonarQube for security-oriented static analysis and can also cover code quality, AI code review and broader AppSec categories. Enterprises that rely heavily on SonarQube-specific maintainability metrics or custom quality profiles should map those requirements during the migration.

Should we keep SonarQube for code quality?

Potentially. Some organizations use a dedicated SAST platform for security and retain SonarQube for quality and technical debt. Others consolidate both. The decision should be based on workflow, coverage, policy and administration rather than a preference for one-tool or two-tool architecture.

Which SonarQube alternative supports on-premises or local analysis?

Aikido offers local scanning options, while Fortify and other traditional enterprise platforms provide self-managed deployment choices. Exact data flow and feature parity vary, so security architecture teams should validate the proposed configuration.

Conclusion

The best SonarQube alternative for enterprise SAST is not necessarily the closest code-quality clone. Aikido Security leads because it brings security-first static analysis, AI-assisted review, enterprise governance and broader code-to-cloud coverage into one developer-facing platform. Semgrep offers a focused and highly extensible modern SAST experience. Checkmarx, Veracode, Black Duck and Fortify provide mature enterprise depth, while Snyk and GitHub align strongly with developer ecosystems. The right proof of concept should measure exploitable issues found, noise avoided, time to feedback and fixes completed.

The post Top SonarQube Alternatives for Enterprise SAST in 2026 appeared first on ITDigest.

AI agents deliver value when they are connected to the systems where work happens. Without those connections, they remain advisory rather than operational. Today, most enterprises still deploy AI tools that sit alongside their workflows instead of embedding them directly into execution, which limits measurable ROI. In fact, an analysis of 847 enterprise AI deployments published by Harvard Business Review found that tools running alongside existing workflows fail at six times the rate of tools built directly into the work.

“Integration is the connective tissue that turns AI from advice into action,” said Brian Wenngatz, CEO of Xurrent. “Without it, an AI agent is an expensive demo with nothing to act on. We built our iPaaS so every agent in Xurrent can reach the systems where work actually happens and do something about it, not just make recommendations.”

Xurrent iPaaS was purpose-built for the agentic era of ITSM. It treats incidents, change requests, service catalogs and CMDB records as first-class objects rather than generic data. Customers start from pre-built solutions and customize them to fit their own workflows, as no integration is truly one-size-fits-all.

Also Read: FPT Launches Flezi Foundry, Advancing AI-Augmented Delivery for Global Enterprises

In practice, when a critical system starts to fail, Xurrent can open the incident, alert the right people, and bring Sera AI agents into investigation before an engineer joins the call. If external systems need to be brought in, that can happen through the iPaaS layer.

Key capabilities include:

• Connecting Xurrent to systems such as ServiceNow, Jira, Okta, ClickUp, Google Drive, and other enterprise tools
• Automating workflows including account provisioning, access management, and incident routing
• Enriching incident response with CMDB data and cross-system context
• Syncing work between ITSM and development tools without manual reconciliation
• Managing integrations directly within Xurrent without external iPaaS platforms or custom code

The launch sets Xurrent apart from the three approaches that dominate ITSM integration today. Most ITSM vendors rent a general-purpose iPaaS, embedding it under their own brand and charging on task or recipe consumption. A few license integration as a separate product, with its own skill set and sales cycle. The rest ship a fixed library of hand-coded integrations and leave customers to file a feature request whenever their needs differ. Xurrent took the longer path: one platform, one roadmap, one vendor, with the iPaaS included at no extra cost.

“Most vendors resell a generic integration platform and send customers a second bill to use it,” said Phil Christianson, Chief Product Officer at Xurrent. “Ours is native to Xurrent and purpose-built for ITSM, so it treats incidents, changes, and service requests as first-class work rather than generic data and customers do not foot the bill for it separately.”

Xurrent is also developing an AI-powered integration builder that will soon allow customers to create integrations by describing what they want in natural language.

Source: PRNewswire

The post Xurrent Launches Built-In iPaaS to Close the AI ROI Gap appeared first on ITDigest.

Also Read: IBM Cloud Unveils Sovereignty Risk Profile to Strengthen AI and Data Compliance

Highlighting the strategic impact of this deployment model on enterprise operations, Richard Nicholas, CEO of Hivelocity, stated, “Our new SaaS Bundle represents the convergence of cloud-native automation and bare metal performance. For companies managing data-intensive workflows, public cloud costs have become an erratic, major operational burden. With this suite, we are giving organizations the automated deployment and scaling capabilities they expect from the public cloud, but with the dedicated power, security, and absolute price predictability that only bare metal infrastructure can provide. It is designed to change how growing technology companies scale their operations without compromising their bottom line.” Ultimately, by bridging operational flexibility with infrastructure-level transparency, Hivelocity provides digital businesses with a scalable, highly reliable alternative to public cloud hyper-scalers, enabling predictable financial management alongside uncompromised performance.

Read More: Hivelocity Launches SaaS Bundle – Cloud Workflow, Bare Metal Economics, Predictable Bill

The post Hivelocity Launches Bare Metal Cloud Suite to Deliver Predictable Cloud Economics appeared first on ITDigest.

Built on AppOmni’s extensive visibility into SaaS environments, Marlin AI analyzes security signals across applications, correlates indicators, and conducts in-depth investigations without requiring extensive manual intervention. The platform aims to reduce the time security teams spend identifying and validating threats, allowing them to focus on higher-value security initiatives.

“The goal of Marlin AI is simple: automate and simplify security correlations and investigations to quickly solve SaaS threats,” said Melissa Ruzzi, Senior Director of AI at AppOmni. “General AI tools can’t make sense of complex SaaS environments. Marlin AI looks deeper into SaaS than any other solution, helping teams understand what matters most and take action faster.”

Also Read: DoControl Introduces First-of-Its-Kind Security Controls for Google Gemini Gems

Marlin AI is aimed at enhancing operational effectiveness by minimizing mean time to investigate (MTTI) and mean time to remediate (MTTR). It is fully autonomous and does not require any configuration on the part of users but begins generating insights straight away. With the use of Marlin, companies will be able to detect threats faster and improve their general SaaS security position.

Some of the capabilities provided by Marlin include AI-powered threat correlation, automated investigation of security incidents, and automatic remediation. The AppOmni Labs intelligence is used to find out any new SaaS risks and verify threats prior to any escalation.

The launch of Marlin is highly appreciated by security experts since it addresses a relevant challenge faced by many companies. Indeed, the number of security alerts and activities performed by AI agents is growing, making it difficult for organizations to handle risks.

“AI agents move at machine speed and generate growing volumes of activity and alerts,” said Todd Thiemann, Principal Analyst at Omdia. “Security teams need a more intelligent way to prioritize and respond effectively. Marlin AI helps organizations navigate this new reality by turbocharging how existing AppOmni customers manage SaaS security while providing new customers with a superior path to operational maturity. It’s an elegant approach to SaaS security and a powerful example of how purpose-built AI can deliver meaningful security outcomes at scale.”

The launch underscores a broader trend toward AI-powered cybersecurity platforms that combine automation, intelligence, and guided remediation to help organizations manage increasingly sophisticated SaaS security challenges.

The post AppOmni Unveils Marlin AI to Automate SaaS Security Investigations and Remediation appeared first on ITDigest.

Flezi Foundry applies Agentic Engineering, a structured delivery approach for software development and IT operations. The model brings AI agents into delivery workflows with human supervision, governance, transparency, and performance measurement built into the process.

Flezi Foundry operates through two service modes:

• Agentic Development Lifecycle (ADLC) supports software development by using specialized AI agents across planning, coding, review, testing, security, and documentation. Working under human supervision, the model is designed to improve delivery capacity, quality, and transparency, aiming to deliver up to 30% more output within the same budget.
• Agentic Managed Services (AMS) applies the same human-agent model to IT operations. Operations agents assist with alert triage, incident resolution, remediation, and service improvement, helping enterprises improve response times, increase automation, and strengthen service performance over time. At maturity, the platform is designed to automate resolution for 60% to 90% of first-line support requests and support 99.5% service-level compliance.

Also Read: Source Support Services Unveils the Unified Services Platform

The platform is built on four foundations. These include hybrid sovereign infrastructure combining Azure Virtual Private Cloud and FPT AI Factory; Hybrid FTE Pods, where human supervisors govern AI agents through Human-in-the-Loop and Human-on-the-Loop models; capacity-based pricing linked to story-point velocity and outcome-based SLA tiers; and a Digital Brain and Skill Marketplace that captures reusable standards, runbooks, and expertise.

To support lower-risk adoption, FPT also provides a structured transition pathway. This begins with a discovery workshop to establish baselines, followed by pilot testing through A/B delivery teams or shadow-mode operations before progressing to full-scale deployment.

“Agentic AI is moving enterprise technology delivery into a new phase, where intelligence is embedded not only in tools, but in the operating model itself,” said Frank Bignone, FPT Software Senior Vice President and Head of Corporate Strategy & Growth, FPT Corporation. “With Flezi Foundry, FPT will continue to shape a future where software development and IT operations are delivered through governed human-agent collaboration, with speed, accountability, and business outcomes built into the foundation.”

The launch advances FPT’s broader AI-first growth strategy, building on FleziPT, FPT’s AI-first platform for enterprise transformation, and extending that foundation into software development and IT operations through Flezi Foundry. Together with FPT’s AI Factories in Vietnam and Japan, an AI-augmented workforce, global delivery network, and enterprise AI solution portfolio, the platform reflects FPT’s continued shift toward AI-first services with governed delivery models, repeatable practices, and outcome-based engagement structures.

Source: BusinessWire

The post FPT Launches Flezi Foundry™, Advancing AI-Augmented Delivery for Global Enterprises appeared first on ITDigest.

Thanks to this development, banks across the globe can get an even wider variety of Temenos applications as SaaS on AWS, including not just digital banking and payment services but also the core banking platform. The combined package aims to assist financial institutions in modernizing their operations while giving them the liberty of choosing how they want to adopt cloud technologies. Firms can either implement the modules separately, deploy a full enterprise solution, or integrate Temenos with their existing infrastructure.

This decision represents an increased move in the sector toward banking architectures that are cloud-native and modular so that financial institutions can react more quickly to continuously changing customer expectations and regulatory requirements. Banks, by moving technical management to SaaS environments, have more time for product innovation, customer engagement, and efficiency in operations.

Also Read: Rafay Systems Launches Token Factory to Help GPU Providers Monetize AI at Scale

Barb Morgan, Chief Product & Technology Officer at Temenos, said: “We’re delighted to expand our Temenos SaaS offering on AWS, further strengthening our SaaS capabilities and giving banks greater flexibility in deploying Temenos solutions as SaaS in line with their technology strategy and market requirements.”

AWS leaders argued that this partnership allows banks the freedom to change their ways gradually without sacrificing the enterprise-level growth and security that are a hallmark of their operations. Scott Mullins, Managing Director for Worldwide Financial Services at AWS, highlighted that through this significant development, banks can introduce new functionalities either gradually or go through a total transformation.

Market experts also recognize this improvement as part of a broader inclination towards composable banking ecosystems. According to David Albertazzi, Executive Advisor & Director of Retail Banking & Payments Practice at Datos Insights, diversifying a cloud-based banking platform is a move that is driven by a desire for more flexibility while ensuring the very important aspects of compliance, security, and data sovereignty are met.

Temenos and AWS have worked together since 2019 and currently support financial institutions ranging from traditional banks to digital-first challengers across multiple global markets. Existing deployments include organizations such as MidWestOne Bank, Credem, WeLab Bank, and ila Bank.

The post Temenos Broadens SaaS Banking Portfolio on AWS to Support End-to-End Modernization appeared first on ITDigest.

The launch marks a major milestone in Source Support Services’ evolution as organizations race to meet the demands of the AI, supercomputing, and hyperscale data center economy. Built on decades of experience delivering outcomes in mission‑critical environments worldwide, the Unified Services Platform enables data center builders, operators, and technology manufacturers to rapidly scale execution across critical power, cooling, and large‑scale technology deployments.

Source Support’s vision is clear: to orchestrate the world of work at scale. The Unified Services Platform represents the evolution of that vision, bringing together technology, talent, and execution into a single, integrated ecosystem built for the accelerating demands of artificial intelligence, data center expansion, and next‑generation original equipment manufacturing (OEM) technologies.

Also Read: Rafay Systems Launches Token Factory to Help GPU Providers Monetize AI at Scale

As AI‑driven capacity requirements intensify and OEMs scale production of mission‑critical equipment, organizations face growing pressure to execute flawlessly across highly distributed, multi‑stakeholder environments. Fragmented service models, disconnected systems, and siloed workflows increase risk, delay delivery, and drive cost overruns across complex projects.

Designed and operated in alignment with ISO-aligned processes, the Unified Services Platform consolidates everything required to design, staff, train, execute, and measure global field service operations into a single integrated environment. Capabilities include work order management, certified technician dispatch, credentialing and compliance, real-time service tracking, parts logistics, quality control, and executive-level reporting, delivering real‑time visibility, disciplined execution, and predictable outcomes at global scale.

“We’ve built the service delivery operating system for the data center buildout economy,” said James Kirby, CEO of Source Support Services. “The Unified Services Platform is a human-centered, Salesforce‑native platform that orchestrates the world of work at scale, backed by a global network of credentialed trades, skilled labor, and IT service professionals operating at the center of the most significant infrastructure investment cycle in a generation.”

Kirby added, “From advanced cooling technologies, including air, liquid, and immersion systems that remove heat loads from the data center floor to the OEMs designing and building the mission‑critical technologies behind it, today’s data center environments demand flawless execution. After 25 years of delivering global IT services, our focus is bringing discipline, coordination, and human‑centered execution to the entire ecosystem.”

Source: BusinessWire

The post Source Support Services Unveils the Unified Services Platform appeared first on ITDigest.

The post Rafay Systems Launches Token Factory to Help GPU Providers Monetize AI at Scale appeared first on ITDigest.

This is a response to a gap between AI technology and enterprise readiness. While most enterprises are investing heavily in AI technology, many are failing to achieve significant returns on investment due to outdated operating models and governance structures. Agentic Service Management will bridge the gap between AI technology and enterprise readiness by aligning IT service management with AI-native technology.

“Most enterprise environments were built for people running tickets and tools, not for fleets of autonomous agents executing tasks across hybrid and multi-cloud estates—and this mismatch is limiting AI from moving out of pilots to outcomes,” said Kris Lovejoy. “You can’t scale agentic workflows on top of operating models that were designed for manual work.”

The solution includes a maturity assessment delivered through Kyndryl Consult, enabling organizations to evaluate their readiness across service management, AI governance, security, and operations. Based on this assessment, enterprises receive a phased roadmap to adopt agentic IT service management responsibly, with guardrails and human oversight. Additionally, Kyndryl Agentic AI Digital Trust provides a security-first framework to manage risk, compliance, and governance across AI-driven workflows, particularly in regulated industries.

Kyndryl is also applying these capabilities internally through its Kyndryl Bridge platform, enhancing operational intelligence and automating service delivery. The company already executes nearly 200 million automations monthly, demonstrating the scale at which agentic AI can transform IT operations.

Also Read: Armada and Microsoft Partner to Deliver Sovereign AI at the Edge with Azure Local

Implications for the IT Industry

Kyndryl’s statement is a sign of the IT industry’s wide-ranging change to AI-native service management and autonomous operations. IT service management (ITSM) models built around ticketing systems and manual workflow operations are becoming less and less compatible with the speed and complexity of modern AI-driven environments. Agentic service management is a hint of the future of systems of execution, where AI agents perform tasks such as infrastructure management, issue resolution, and operational optimization in real-time.

IT leaders must now commit to AI governance, orchestration, and operational transparency as this evolution brings along with it new priorities. On the one hand, enterprises should develop IT architectures for continuous, autonomous decision-making without compromising the regulatory compliance that e.g. ISO 42001 requires. On the other hand, implementing AI governance frameworks, integrating real-time monitoring systems, and policy-driven controls into the core infrastructure is a challenge.

The increasing role of AI digital trust frameworks only underscores the fact that we have to find ways for security and accountability to co-exist with innovation. IT teams are also seeing their roles radically transformed by the coming together of AI, cloud and IT service management. Rather than tracking tickets and manually working on infrastructure, IT professionals will progressively be monitoring AI-driven systems, their chief concerns being strategy, governance and performance optimization.

Business Impact and Strategic Value

For businesses, Agentic Service Management can be a game-changer. They can greatly improve their efficiency and agility by automating routine IT processes and resolving issues in real time. Organizations will be able to reduce the amount of downtime, cut the costs of their operations, and make their services more reliable.

What’s more, being able to roll out AI-driven workflows in hybrid and multi-cloud settings means quicker innovation. Companies can launch brand new applications, fine tune their infrastructures, and meet changing demands of the market with even more speed and accuracy.

Besides that, embedding governance and compliance frameworks make sure that the usage of AI won’t compromise security or regulatory compliance. This holds very true especially for industries such as banking, health care, and government, where data protection and compliance are of utmost importance.

Enabling the Future of Autonomous IT

Kyndryl’s Agentic Service Management solution is a testament to the defining trend in enterprise technology today: the move from manual IT operations to autonomous, intelligent service ecosystems. With its solution offering a framework for the implementation of agentic AI, the company is helping organizations move from proof-of-concepts to business outcomes.

As enterprises continue to leverage AI at scale, solutions like this will play a crucial part in helping organizations evolve from being mere enablers within the enterprise to being strategic business differentiators for innovation, efficiency, and competitiveness.

The post Kyndryl Launches Agentic Service Management to Accelerate AI-Native IT Operations appeared first on ITDigest.

Google Gemini Gems allow users to build personalized AI assistants by adding instructions and internal content like documents, PDFs, and internal data to AI tools. Although this has improved productivity, it has also opened new security risks for organizations, especially when users share these gems, even if they do not have direct access to the original content. This has created a new problem, considering that gems use underlying files to respond to users, and when they are shared, they expose internal data to unauthorized individuals.

In response to this new security risk, DoControl has incorporated Google Gemini Gems into its security framework, considering them core assets within Google Drive environments, allowing IT and security teams to monitor them with similar control levels to other critical data resources.

Also Read: Securitas Strengthens Digital Security Portfolio with Acquisition of Liferaft, a Leading SaaS Threat Intelligence Platform

With the new capabilities, organizations can monitor the creation and sharing of Gems, evaluate the risks of the associated data, and maintain a record of access and exposure events. Organizations can now use the platform to enforce policies automatically, including revoking or restricting access and sharing of Gems, blocking the sharing of Gems with the outside world, and setting up temporary permissions to minimize potential risks.

“Google Gemini Gems represent a powerful shift in how work gets done, but they also introduce new and often invisible data risks,” said Tamir Passi, VP of Product at DoControl. “Because this is such a new capability, organizations don’t yet have established security practices around it. We moved quickly to address this new risk, as we do with all emerging threats. Our goal is to continuously deliver visibility and control so that as new innovations emerge within Google Workspace, our customers can confidently adopt AI tools without compromising their security.”

The launch is a reflection of a wider industry move to protect AI-driven workflows, especially as organizations increasingly integrate generative AI into everyday business. With its extension into new AI assets such as Gemini Gems, DoControl is seeking to help organizations balance innovation and strong data protection.

The post DoControl Introduces First-of-Its-Kind Security Controls for Google Gemini Gems appeared first on ITDigest.