Articles
CI/CD, platform engineering, security and reliability, written for engineering leaders who want specifics and sources.
Written by Mateusz Ulas, platform engineer and founder of Expeditious Software. About Mateusz
Latest article
What post-quantum cryptography is, why harvest now, decrypt later makes it urgent, the 2030 and 2035 deadlines, and how to start with a crypto inventory.
50 articles
What chaos engineering is, how to run a first experiment safely, how it differs from load and DR testing, which tools to use, and how it maps to DORA testing.
RTO vs RPO, the four cloud DR strategies, why replication is not a backup, how often to test, and what EU DORA Articles 11 and 12 demand of regulated teams.
Is AI-generated code safe to ship? DORA, Veracode and GitHub data on trust, vulnerability rates and the review gap, and what governance should require.
Why secrets sprawl keeps growing, how leaked credentials stay exploitable for years, and how to decide between vaulted rotation and workload identity in 2026.
GitOps in 2026: the four principles, drift and reconciliation, GitOps vs IaC, Argo CD vs Flux, and the audit case for regulated teams.
How to measure developer productivity in 2026 without gaming the team: what DORA, SPACE, DevEx and the DX Core 4 actually measure, and how to combine them.
Progressive delivery decoded: canary vs blue-green vs feature flags, how to roll back a bad release fast, and why it matters more as AI raises change volume.
Software supply chain security in 2026: what an SBOM is, how SLSA build provenance differs, and exactly what the EU Cyber Resilience Act demands - and by when.
Platform engineering vs DevOps for senior teams: what an internal developer platform really is, golden paths, the DORA tradeoff, and when a platform team pays off.
Infrastructure as Code for senior teams: what it really is, why drift breaks production, what policy as code buys regulated teams, and Terraform vs OpenTofu.
Observability vs monitoring for senior engineers: the real difference, the three pillars, why OpenTelemetry just won, and how to keep the bill honest.
Why AI, toil, IP attacks, the EU CRA, and hardware/software co-development make platform engineering discipline the deciding factor for semiconductor teams.
Where to start
The free Release Check shows where your last release spent its time and what that costs a year, in under 5 minutes and without a call.