Hi there Reader,
We're bringing Metaport SaaS to you in 2026—are you in? Metaport CE has been with us for a while, but since talking to dozens of teams like yours, it's time to progress to the next stage.
Techweek is here in New Zealand next week and we'll be at several of the events. Come and say hi if you'll be also there—you can't miss us and our signature black and logo t-shirts!
Application security news is never far from inboxes, feeds, and Slack. But despite our research telling us why at-risk projects still exist in team web and application portfolios—security vulnerabilities and exposures continue to make the news this week - and it's only Wednesday - with Shai-Hulud 3.
And with that, onwards with with the report—thanks for reading!
—Russ
|
|
Metaport 1.0.0-rc1
We just tagged 1.0.0-rc1 and we're looking for early adopters.
If your team is currently reviewing or looking to review its maintenance strategy, Metaport should be part of your thinking.
We're now accepting interest for early access to the platform and we'd love to chat with your teams and demo the product.
|
|
|
IaC vs Agent
Agencies tell us that running agents in production is a hard-ask from a certification and security standpoint. Last month we said we'd develop an alternative and this month we delivered it.
Point Metaport at your IaC assets on Gitlab or Github to provide your team with end-of-life data for its strategic maintenance planning.
Dependency and vulnerability information now comes separately from a Dependabot or DependencyTrack integration meaning teams can now mix and match sources.
|
|
|
Margin Killers
Earlier this month we published a post arguing that agencies rarely have a complete picture of their own profitability because of mostly hidden maintenance costs.
This shouldn't be news to anyone, especially if as an agency you've ever tried drilling down into every aspect of maintenance work to find bottlenecks and inefficiencies.
|
There is no "I" in "Team"! When devs, PMs, and AppSec all have the same managed application view, team-like behaviour emerges.
From end-of-life expiry and security vulnerability notifications to executive health reports and proactive portfolio-wide search, Metaport is the maintenance strategy and planning tool for agencies, studios, and in-house delivery teams.
