DevOps Grows Up: Faster Release Times, Better Security Ratings, and Increased Adoption of AI
June 09, 2021

Valerie Silverthorne
GitLab

In 2020, while a pandemic raged and teams everywhere learned how to work remotely, something rather unexpected happened to DevOps: it grew up.

Teams stopped talking about DevOps and simply started doing DevOps, bringing in "big guns" technologies, new ways of thinking, and making huge breakthroughs in everything from release times to automation, new technology adoption and code quality.


In short, GitLab's 2021 Global DevSecOps Survey revealed profound progress across the board:

■ 60% of developers are releasing code 2x faster than before, thanks to DevOps. – up 25% from (pre-pandemic) 2020.

■ 72% of security pros rated their organizations' security efforts as "good" or "strong." – up 13% over 2020.

■ 56% of ops teams members said they are "fully" or mostly automated. – up 10% from 2020.

■ Almost 25% of respondents claimed to have full test automation. – up 13% from 2020.

■ 75% of teams are either using AI/ML or bots for test/code review, or they're planning to. – up 41% from 2020.

■ In our 2020 survey dev, sec, and ops said they needed better communication and collaboration skills for their future careers. This year, after an intense period of enforced soft skills, their priorities have shifted dramatically to AI/ML (devs), subject matter expertise (sec), and advanced programming (ops).

A Snapshot of Today's DevOps

All told, 4300 people from around the world shared their stories of DevOps successes and failures, often in their own words. The picture that emerged was clearly a methodology hitting its stride. For starters, 43% have been doing DevOps for between 3 and more than 5 years, meaning they're very well seasoned.

What's in their DevOps tech stack?

CI/CD followed by DevSecOps, test automation and a DevOps platform. Interestingly, AI/ML use is up to 11.5%, a 7 point jump from the 2020 survey. Almost 70% said they use a DevOps platform, though we left it to them to define what that means, and they credit that with making their practice better, boosting collaboration, and making automation and visibility easier.

But for the third year in a row, testing remains the sore spot and is still the number one reason for release delays. That could change in the near future though: 41% of survey takers use AI/ML to check code or use a bot for testing, up from 16% last year.

Devs on DevOps

Responses from developers clearly underscored how seriously teams are taking DevOps. Devs didn't make incremental changes; instead they brought in game changing technologies including source code management, CI/CD, a DevOps platform and automated testing. As we saw in the 2020 survey, devs continued to report their roles are changing, taking on responsibilities like provisioning and monitoring that used to be the province of operations. And 39% say they're completely responsible for security, clear signs of a "shift left."

But the tech and role changes were just part of what went on in 2020. It's clear dev teams spent thoughtful time on how to improve their DevOps practices. In their own words:

"Our team adopted microservices on a new project and then fully embraced continuous delivery. To get to continuous delivery, we need to assure quality, so we have automated tests built-in. Investing in these areas allowed our team to deploy 2000 times to production over a year, where in the past we would deploy maybe 6 times."

"We are releasing code globally instead of into specific locations with automated deployments. Principally, cutting commit-to-live time (by removing batching) encouraged smaller changes incurring less overhead (due to removing a coping strategy of increasing scope)."

"We divide and conquer: splitting the code into more modules has helped decrease debug time, improved stability, and allow a mix and match approach."

"We evaluated the team and did value stream mapping and finalized the desired state. In most of the cases we found the team needs an automated pipeline for faster delivery and immediate feedback so that they can act fast rather than later . We also moved security left so that developers can fix security issues fast. We also made sure developers are doing code review in a collaborative way through pull requests."

Security Successes

In the 2020 report, security was a standout, but not necessarily in a good way: not many scans were being run, dev and sec continued to point fingers and there was zero agreement over who "owned" security, or even how safe and secure teams were.

Apparently it took a pandemic for that to improve because this year, 72% of security pros rated their sec efforts as either "strong" or "good." Teams are running SAST, DAST, compliance and more scans than ever before, and even the friction between dev and sec has decreased dramatically. Sec pros still complain that devs don't find enough bugs early in the process while devs are still waiting for scan results to show up in their IDEs.

But the results this year feel more like DevSecOps than ever before.

The Changing Roles in Operations

The biggest takeaway from ops pros? Their roles continue to change, with a growing emphasis on managing the cloud (about 50% say that's most of their job today) or on managing infrastructure. In their own words:

"I'm a DevOps coach."

"Everything from provisioning servers to managing people. Most of the stuff in between is building automation platforms to do the day-to-day work."

"I'm a platform engineer."

"I plan the company roadmap for software development, manage the entire developer team, and come up with R&D efforts."

"I'm a Jack of all trades ... a lil bit of everything I can get myself into."

"DevOps, SRE monitor and make sure the platform works."

"Maintain the tools of the DevOps toolchain in operational condition and continue to improve the platform and practices."

Looking to the Future

In another sign of perhaps pandemic-fueled progress, the majority of the survey takers plan to focus their investments this year on the cloud, followed by artificial intelligence. That's a significant change from the 2020 survey where cloud was the 4th place pick and AI was in a distant 8th place.

And after a year of re-thinking and doing, 75% of survey takers said they felt either "somewhat" or "well" prepared for the future.

Valerie Silverthorne is Senior Content Editor at GitLab
Share this

Industry News

January 26, 2023

Ubuntu Pro, Canonical’s comprehensive subscription for secure open source and compliance, is now generally available.

January 26, 2023

Mirantis, freeing developers to create their most valuable code, today announced that it has acquired the Santa Clara, California-based Shipa to add automated application discovery, operations, security, and observability to the Lens Kubernetes Platform.

January 25, 2023

SmartBear has integrated the powerful contract testing capabilities of PactFlow with SwaggerHub.

January 25, 2023

Venafi introduced TLS Protect for Kubernetes.

January 25, 2023

Tricentis announced the general availability of Tricentis Test Automation, a cloud-based test automation solution that simplifies test creation, orchestration, and scalable test execution for easier collaboration among QA teams and their business stakeholders and faster, higher-quality, and more durable releases of web-based applications and business processes.

January 24, 2023

Harness announced the acquisition of Propelo.

January 23, 2023

Couchbase announced its Couchbase Capella Database-as-a-Service (DBaaS) offering on Azure.

January 23, 2023

Mendix and Software Improvement Group (SIG) have announced the release of Mendix Quality & Security Management (QSM), a new cybersecurity solution that provides continuous deep-dive insights into security and code quality to immediately address risks and vulnerabilities.

January 23, 2023

Trunk announces the public launch of CI Analytics.

January 23, 2023

Panaya announced a new Partnership Program in response to ongoing growth within its partner network over the past year.

January 23, 2023

Cloudian closed $60 million in new funding, bringing the company’s total funding to $233 million.

January 19, 2023

Progress announced the R1 2023 release of Progress Telerik and Progress Kendo UI.

January 19, 2023

Wallarm announced the early release of the Wallarm API Leak Management solution, an enhanced API security technology designed to help organizations identify and remediate attacks exploiting leaked API keys and secrets, while providing on-going protection against hacks in the event of a leak.

January 19, 2023

ThreatModeler launched Threat Model Marketplace, a cybersecurity asset marketplace offering pre-built, field-tested threat models to be downloaded — free for a limited time — and incorporated into new and ongoing threat modeling initiatives.

January 18, 2023

Software AG has launched new updates to its webMethods platform that will simplify the process by which developers can find, work on and deploy new APIs and integration tools or capabilities.