[{"data":1,"prerenderedAt":524},["ShallowReactive",2],{"/en-us/the-source/ai/the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries":3,"footer-en-us":52,"the-source-banner-en-us":386,"the-source-navigation-en-us":392,"article-site-categories-en-us":415,"the-source-newsletter-en-us":417,"the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries-article-hero-category-en-us":424,"the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries-the-source-source-cta-en-us":450,"the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries-article-hero-author-en-us":459,"the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries-category-en-us":484,"the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries-the-source-resources-en-us":497},{"id":4,"title":5,"body":6,"category":7,"config":8,"content":14,"description":6,"extension":41,"meta":42,"navigation":43,"path":44,"seo":45,"slug":48,"stem":49,"type":50,"__hash__":51},"theSource/en-us/the-source/ai/the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries.yml","The Real Cost Of Build Vs Buy For Agentic Ai In Regulated Industries",null,"ai",{"layout":9,"template":10,"featured":11,"author":12,"sourceCTA":13},"the-source","TheSourceArticle",false,"bryan-ross","global-devsecops-report-2025",{"date":15,"title":16,"description":17,"timeToRead":18,"keyTakeaways":19,"articleBody":23,"faq":24,"heroImage":40},"2026-03-24","The real cost of build vs. buy for agentic AI in regulated industries","Agentic AI is repeating the DevOps toolchain sprawl pattern — and the organizations that recognize it early will have a significant advantage.","5 min read",[20,21,22],"In regulated industries, building agentic AI in-house is a multi-year platform engineering commitment. The regulatory, security, and integration obligations tend to be far greater than initial analyses suggest.","Agentic AI is following the same fragmentation arc as DevOps toolchains. Organizations that make a platform decision early, rather than a series of point decisions, can compress years of catch-up into months.","For a team of roughly 200 developers, an internal AI build costs an estimated $1.4M in year one with 12–18 months to first use case. A purpose-built platform runs roughly $410K–$460K with deployment in days.","There's a pattern regulated industries know well. A new capability emerges. Teams spin up point solutions. Each one solves a discrete problem. Before long, you're managing fifteen tools that were never designed to work together and spending more engineering time on integration than on the outcomes you were trying to achieve.\n\nThat's what happened with DevOps toolchains. And it's exactly what's starting to happen with agentic AI.\n\n## The build trap\n\nWhen AI coding tools started delivering real productivity gains, the natural instinct for many organizations was to go deeper. A code assistant here. An internal AI gateway there. A few open-source models, some custom orchestration, and suddenly you're calling it a platform.\n\nThere's a reason this happens. Technology teams are wired to build, and that instinct isn't wrong. Building is how engineers learn, how teams develop expertise, and how genuinely novel problems get solved. The same DIY energy that shaped the early DevOps era produced some remarkable tools and practices. But that same divergent experimentation rarely serves the broader organization. Organizations don't want some people to be AI-enabled. They want everyone to be AI-enabled, consistently, in a way that's governable and scalable. That's the tension at the center of every build vs. buy conversation right now.\n\nBefore going further, it's worth naming what you're actually deciding. Most build vs. buy conversations quietly compare two very different things:\n\n* **Build**: Assemble open models + cloud AI services + custom orchestration + custom governance + the underlying infrastructure (compute, storage, databases, networking) required to run it all. You are the platform vendor.\n* **Buy**: Adopt a platform that already unifies models, tools, orchestration, and governance across the SDLC. You are the platform consumer.\n\nThat distinction matters enormously in a regulated environment. Building an internal agentic AI platform in banking or insurance is a multi-year platform engineering commitment with regulatory surface area most organizations underestimate:\n\n* **Model lifecycle management**: Selection, tuning, drift monitoring, deprecation. Ongoing, always on.\n* **Security hardening**: Agents that touch code and infrastructure trigger obligations well beyond a standard SaaS integration: prompt injection defenses, sandboxing, SIEM and DLP integration, red-team testing.\n* **Regulatory documentation**: Under frameworks like DORA and the EU AI Act, an internal AI system is a *regulated system*. You define the risk classification, maintain the documentation, and produce the audit evidence, meaning recurring obligations for the life of the system.\n* **Platform integration**: Agents must be embedded in your SDLC to deliver meaningful value. Every touchpoint is a mini-product that requires maintenance across IDE versions, tooling changes, and org restructures.\n\nAnd then there's the cost that rarely makes it into initial analyses: every engineer building the platform is an engineer *not* modernizing a legacy pipeline, remediating security debt, or accelerating a critical delivery program.\n\n## Agentic AI is following the DevOps playbook — for better and worse\n\nLet’s think back to the DevOps era. Teams didn't set out to build fragmented toolchains, they made rational, incremental decisions. A better CI tool here. A preferred SCM there. A security scanner bolted on. A separate secrets manager. A different deployment orchestrator.\n\nEach decision made sense in isolation. Collectively, [they created sprawl](https://about.gitlab.com/the-source/platform/more-code-more-bottlenecks-tackling-the-ai-paradox/): integration burden, inconsistent governance, duplicated effort, and no single view of what was happening across the SDLC.\n\nThe industry spent the better part of a decade consolidating around platforms precisely because that sprawl was expensive and hard to audit, two things regulated organizations can't afford. Agentic AI is following the same arc, faster. The organizations that recognize this early enough to make a *platform decision*, rather than a series of point decisions, will compress years of catch-up into months.\n\n![Regulated organizations spent a decade consolidating fragmented DevOps toolchains. Agentic Al is following the same arc — faster.](https://res.cloudinary.com/about-gitlab-com/image/upload/v1774033724/hhkpa2moojmnjfp4q5tb.png)\n\n## A framework for the decision\n\nRather than a generic build vs. buy debate, anchor on three questions:\n\n1. **Is your requirement truly unique?** Build is defensible when you have workflows no vendor supports, deployment patterns no platform can meet, and genuine appetite to fund platform engineering as an enduring capability. Modern platforms, however, increasingly meet regulated organizations where they are and support cloud-hosted, self-managed, and dedicated single-tenant deployments to narrow the gap between platform convenience and enterprise control requirements. If your goals are faster code review, pipeline migration, security triage, or test automation, you're in territory where platforms are already delivering for your peers.\n2. **How much regulatory surface area can you realistically own?** Building makes you the system owner under ICT risk frameworks, the AI provider under emerging AI regulations, and the entity accountable for model behavior, documentation, and monitoring. Buying doesn't eliminate regulatory responsibility, but it offloads platform-level obligations to a vendor whose business depends on getting them right, freeing your compliance cycles for how AI is used, not how it's built.\n3. **What's your time horizon?** If your board expects demonstrable AI value across multiple teams within 12–24 months, a multi-year internal build is misaligned with those expectations from day one. \n\nThe numbers reflect this. For example, for a regulated organization of roughly 200 developers, an internal build on a cloud AI foundation typically runs ≈$1.4M in year one — engineering labor, infrastructure, integration, security, compliance — with 6–12 months before anything is production-ready and 2–3 dedicated FTEs required just to keep it stable. Time to first real use case: 12–18 months, conservatively.\n\nAn agentic AI platform like [GitLab Duo Agent Platform](https://about.gitlab.com/gitlab-duo-agent-platform/) runs ≈$410K–$460K for the same population with initial deployment in days and early productivity gains of 15–25% (sample from previous implementations) once agents are embedded in everyday workflows. Time to first use case: weeks, not years. That's not a marginal difference. It's the difference between showing your board AI ROI this fiscal year or explaining why you're still building infrastructure.\n\n*Analysis courtesy of Sumedh Jigjinni and GitLab's [Business Value Services](https://handbook.gitlab.com/handbook/solutions-architects/sa-practices/business-value-consulting/) team.*\n\n## “But we need to customize”\n\nThis is the most common objection for regulated industries. The goal isn't to take customization off the table. It's to right-size where customization happens.\n\nThe best agentic AI platforms support a layered model that serves every level of the organization. Most users don't need to build anything: they access agents created by others through a shared catalog, getting immediate value within a governed environment. Power users can tailor agents to their specific context by adjusting system prompts and parameters, without writing a line of code. Teams with genuinely differentiated use cases can develop custom agent flows and publish them to the catalog, turning internal work into organizational capability. And experts can still integrate external models, domain-specific tools, and proprietary data sources through a governed interface, rather than as a parallel shadow platform.\n\nThis is what intelligent orchestration actually looks like: [not uniformity, but coherence](https://about.gitlab.com/the-source/ai/the-next-wave-of-devsecops-team-of-one-manager-of-many/). Everyone operates within the same governance layer, with flexibility that scales to need.\n\nThe lesson from DevOps consolidation wasn't \"don't use tools.\" It was \"don't let tools use you.\" Agentic AI deserves the same discipline.",[25,28,31,34,37],{"header":26,"content":27},"What is the difference between building and buying an agentic AI platform?","Building means assembling open models, cloud AI services, custom orchestration, and governance infrastructure yourself — making your team the platform vendor. Buying means adopting a unified platform that already combines models, tools, orchestration, and governance. In regulated environments, that distinction carries significant compliance and resourcing implications.",{"header":29,"content":30},"How much does it cost to build agentic AI in-house vs. buying a platform?","For a team of roughly 200 developers, an internal build typically costs around $1.4M in year one, requires 2–3 dedicated FTEs to maintain, and takes 12–18 months to reach a first real use case. A purpose-built platform like GitLab Duo Agent Platform runs approximately $410K–$460K with deployment in days.",{"header":32,"content":33},"Why is agentic AI following the same fragmentation pattern as DevOps toolchains?","Just as DevOps teams made rational, incremental tool decisions that collectively created sprawl, agentic AI teams are assembling point solutions that weren't designed to work together. The result is the same: integration burden, inconsistent governance, and no unified view across the SDLC.",{"header":35,"content":36},"What regulatory obligations does building an internal AI system create?","Under frameworks like DORA and the EU AI Act, an internally built AI system is a regulated system. The building organization owns risk classification, audit documentation, model lifecycle management, security hardening, and ongoing compliance monitoring — obligations that persist for the life of the system.",{"header":38,"content":39},"Can organizations still customize agents if they buy a platform instead of building?","Yes. Leading agentic AI platforms support a layered model: most users access pre-built agents through a shared catalog, power users adjust prompts and parameters without coding, and teams with differentiated needs can build and publish custom agent flows — all within a single governance layer.","https://res.cloudinary.com/about-gitlab-com/image/upload/v1774034036/ulsa40ld4bz9t1rjez3y.png","yml",{},true,"/en-us/the-source/ai/the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries",{"config":46,"title":47,"description":17},{"noIndex":11},"Build vs. buy for agentic AI in regulated industries","the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries","en-us/the-source/ai/the-real-cost-of-build-vs-buy-for-agentic-ai-in-regulated-industries","article","8YiHH3Xt0YoJRdQI-e6p5_nStW4YVlE9jjglEO0MqQU",{"data":53},{"text":54,"source":55,"edit":61,"contribute":66,"config":71,"items":76,"minimal":375},"Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license",{"text":56,"config":57},"View page source",{"href":58,"dataGaName":59,"dataGaLocation":60},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":62,"config":63},"Edit this page",{"href":64,"dataGaName":65,"dataGaLocation":60},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":67,"config":68},"Please contribute",{"href":69,"dataGaName":70,"dataGaLocation":60},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":72,"facebook":73,"youtube":74,"linkedin":75},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[77,134,191,250,313],{"title":78,"links":79,"subMenu":95},"Pricing",[80,85,90],{"text":81,"config":82},"View plans",{"href":83,"dataGaName":84,"dataGaLocation":60},"/pricing/","view plans",{"text":86,"config":87},"Why Premium?",{"href":88,"dataGaName":89,"dataGaLocation":60},"/pricing/premium/","why premium",{"text":91,"config":92},"Why Ultimate?",{"href":93,"dataGaName":94,"dataGaLocation":60},"/pricing/ultimate/","why ultimate",[96],{"title":97,"links":98},"Contact Us",[99,104,109,114,119,124,129],{"text":100,"config":101},"Contact sales",{"href":102,"dataGaName":103,"dataGaLocation":60},"/sales/","sales",{"text":105,"config":106},"Support portal",{"href":107,"dataGaName":108,"dataGaLocation":60},"https://support.gitlab.com","support portal",{"text":110,"config":111},"Customer portal",{"href":112,"dataGaName":113,"dataGaLocation":60},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"text":115,"config":116},"Status",{"href":117,"dataGaName":118,"dataGaLocation":60},"https://status.gitlab.com/","status",{"text":120,"config":121},"Terms of use",{"href":122,"dataGaName":123,"dataGaLocation":60},"/terms/","terms of use",{"text":125,"config":126},"Privacy statement",{"href":127,"dataGaName":128,"dataGaLocation":60},"/privacy/","privacy statement",{"text":130,"config":131},"Cookie preferences",{"dataGaName":132,"dataGaLocation":60,"id":133,"isOneTrustButton":43},"cookie preferences","ot-sdk-btn",{"title":135,"links":136,"subMenu":147},"Product",[137,142],{"text":138,"config":139},"DevSecOps platform",{"href":140,"dataGaName":141,"dataGaLocation":60},"/platform/","devsecops platform",{"text":143,"config":144},"AI-Assisted Development",{"href":145,"dataGaName":146,"dataGaLocation":60},"/gitlab-duo-agent-platform/","ai-assisted development",[148],{"title":149,"links":150},"Topics",[151,156,161,166,171,176,181,186],{"text":152,"config":153},"CICD",{"href":154,"dataGaName":155,"dataGaLocation":60},"/topics/ci-cd/","cicd",{"text":157,"config":158},"GitOps",{"href":159,"dataGaName":160,"dataGaLocation":60},"/topics/gitops/","gitops",{"text":162,"config":163},"DevOps",{"href":164,"dataGaName":165,"dataGaLocation":60},"/topics/devops/","devops",{"text":167,"config":168},"Version Control",{"href":169,"dataGaName":170,"dataGaLocation":60},"/topics/version-control/","version control",{"text":172,"config":173},"DevSecOps",{"href":174,"dataGaName":175,"dataGaLocation":60},"/topics/devsecops/","devsecops",{"text":177,"config":178},"Cloud Native",{"href":179,"dataGaName":180,"dataGaLocation":60},"/topics/cloud-native/","cloud native",{"text":182,"config":183},"AI for Coding",{"href":184,"dataGaName":185,"dataGaLocation":60},"/topics/devops/ai-for-coding/","ai for coding",{"text":187,"config":188},"Agentic AI",{"href":189,"dataGaName":190,"dataGaLocation":60},"/topics/agentic-ai/","agentic ai",{"title":192,"links":193},"Solutions",[194,198,203,208,213,217,222,225,230,235,240,245],{"text":195,"config":196},"Application Security Testing",{"href":197,"dataGaName":195,"dataGaLocation":60},"/solutions/application-security-testing/",{"text":199,"config":200},"Automated software delivery",{"href":201,"dataGaName":202,"dataGaLocation":60},"/solutions/delivery-automation/","automated software delivery",{"text":204,"config":205},"Agile development",{"href":206,"dataGaName":207,"dataGaLocation":60},"/solutions/agile-delivery/","agile delivery",{"text":209,"config":210},"SCM",{"href":211,"dataGaName":212,"dataGaLocation":60},"/solutions/source-code-management/","source code management",{"text":152,"config":214},{"href":215,"dataGaName":216,"dataGaLocation":60},"/solutions/continuous-integration/","continuous integration & delivery",{"text":218,"config":219},"Value stream management",{"href":220,"dataGaName":221,"dataGaLocation":60},"/solutions/value-stream-management/","value stream management",{"text":157,"config":223},{"href":224,"dataGaName":160,"dataGaLocation":60},"/solutions/gitops/",{"text":226,"config":227},"Enterprise",{"href":228,"dataGaName":229,"dataGaLocation":60},"/enterprise/","enterprise",{"text":231,"config":232},"Small business",{"href":233,"dataGaName":234,"dataGaLocation":60},"/small-business/","small business",{"text":236,"config":237},"Public sector",{"href":238,"dataGaName":239,"dataGaLocation":60},"/solutions/public-sector/","public sector",{"text":241,"config":242},"Education",{"href":243,"dataGaName":244,"dataGaLocation":60},"/solutions/education/","education",{"text":246,"config":247},"Financial services",{"href":248,"dataGaName":249,"dataGaLocation":60},"/solutions/finance/","financial services",{"title":251,"links":252},"Resources",[253,258,263,268,273,278,283,288,293,298,303,308],{"text":254,"config":255},"Install",{"href":256,"dataGaName":257,"dataGaLocation":60},"/install/","install",{"text":259,"config":260},"Quick start guides",{"href":261,"dataGaName":262,"dataGaLocation":60},"/get-started/","quick setup checklists",{"text":264,"config":265},"Learn",{"href":266,"dataGaName":267,"dataGaLocation":60},"https://university.gitlab.com/","learn",{"text":269,"config":270},"Product documentation",{"href":271,"dataGaName":272,"dataGaLocation":60},"https://docs.gitlab.com/","docs",{"text":274,"config":275},"Blog",{"href":276,"dataGaName":277,"dataGaLocation":60},"/blog/","blog",{"text":279,"config":280},"Customer success stories",{"href":281,"dataGaName":282,"dataGaLocation":60},"/customers/","customer success stories",{"text":284,"config":285},"Remote",{"href":286,"dataGaName":287,"dataGaLocation":60},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"text":289,"config":290},"GitLab Services",{"href":291,"dataGaName":292,"dataGaLocation":60},"/services/","services",{"text":294,"config":295},"Community",{"href":296,"dataGaName":297,"dataGaLocation":60},"/community/","community",{"text":299,"config":300},"Forum",{"href":301,"dataGaName":302,"dataGaLocation":60},"https://forum.gitlab.com/","forum",{"text":304,"config":305},"Events",{"href":306,"dataGaName":307,"dataGaLocation":60},"/events/","events",{"text":309,"config":310},"Partners",{"href":311,"dataGaName":312,"dataGaLocation":60},"/partners/","partners",{"title":314,"links":315},"Company",[316,321,326,331,336,341,346,350,355,360,365,370],{"text":317,"config":318},"About",{"href":319,"dataGaName":320,"dataGaLocation":60},"/company/","company",{"text":322,"config":323},"Jobs",{"href":324,"dataGaName":325,"dataGaLocation":60},"/jobs/","jobs",{"text":327,"config":328},"Leadership",{"href":329,"dataGaName":330,"dataGaLocation":60},"/company/team/e-group/","leadership",{"text":332,"config":333},"Team",{"href":334,"dataGaName":335,"dataGaLocation":60},"/company/team/","team",{"text":337,"config":338},"Handbook",{"href":339,"dataGaName":340,"dataGaLocation":60},"https://handbook.gitlab.com/","handbook",{"text":342,"config":343},"Investor relations",{"href":344,"dataGaName":345,"dataGaLocation":60},"https://ir.gitlab.com/","investor relations",{"text":347,"config":348},"Sustainability",{"href":349,"dataGaName":347,"dataGaLocation":60},"/sustainability/",{"text":351,"config":352},"Diversity, inclusion and belonging (DIB)",{"href":353,"dataGaName":354,"dataGaLocation":60},"/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":356,"config":357},"Trust Center",{"href":358,"dataGaName":359,"dataGaLocation":60},"/security/","trust center",{"text":361,"config":362},"Newsletter",{"href":363,"dataGaName":364,"dataGaLocation":60},"/company/contact/#contact-forms","newsletter",{"text":366,"config":367},"Press",{"href":368,"dataGaName":369,"dataGaLocation":60},"/press/","press",{"text":371,"config":372},"Modern Slavery Transparency Statement",{"href":373,"dataGaName":374,"dataGaLocation":60},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":376},[377,380,383],{"text":378,"config":379},"Terms",{"href":122,"dataGaName":123,"dataGaLocation":60},{"text":381,"config":382},"Cookies",{"dataGaName":132,"dataGaLocation":60,"id":133,"isOneTrustButton":43},{"text":384,"config":385},"Privacy",{"href":127,"dataGaName":128,"dataGaLocation":60},{"visibility":43,"title":387,"button":388},"The Intelligent Software Development Era: How AI is reshaping DevSecOps teams",{"config":389,"text":391},{"href":390},"/resources/developer-survey/","Get the research report",{"logo":393,"subscribeLink":398,"navItems":402},{"altText":394,"config":395},"the source logo",{"src":396,"href":397},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1750191004/t7wz1klfb2kxkezksv9t.svg","/the-source/",{"text":399,"config":400},"Subscribe",{"href":401},"#subscribe",[403,407,411],{"text":404,"config":405},"Artificial Intelligence",{"href":406},"/the-source/ai/",{"text":408,"config":409},"Security & Compliance",{"href":410},"/the-source/security/",{"text":412,"config":413},"Platform & Infrastructure",{"href":414},"/the-source/platform/",{"categoryNames":416},{"ai":404,"platform":412,"security":408},{"title":418,"description":419,"submitMessage":420,"formData":421},"The Source Newsletter","Stay updated with insights for the future of software development.","You have successfully signed up for The Source’s newsletter.",{"config":422},{"formId":423,"formName":364,"hideRequiredLabel":43},1077,{"id":425,"title":426,"body":6,"category":6,"config":427,"content":428,"description":6,"extension":41,"meta":444,"navigation":43,"path":445,"seo":446,"slug":7,"stem":447,"testContent":6,"type":448,"__hash__":449},"pages/en-us/the-source/ai/index.yml","",{"layout":9},[429,436],{"componentName":430,"type":430,"componentContent":431},"TheSourceCategoryHero",{"title":404,"description":432,"image":433},"Explore expert insights on how AI is transforming software development, and how organizations can get the most out of their AI investments.",{"config":434},{"src":435},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1751463300/eoudcbj5aoucl0spsp0c.png",{"componentName":437,"type":437,"componentContent":438},"TheSourceCategoryMainSection",{"config":439},{"sourceCTAs":440},[441,442,443],"source-lp-how-to-get-started-using-ai-in-software-development","navigating-ai-maturity-in-devsecops","source-lp-ai-guide-for-enterprise-leaders-building-the-right-approach",{},"/en-us/the-source/ai",{"title":404,"description":432,"ogImage":435},"en-us/the-source/ai/index","category","wtQi5a4Yy8rZpv9pRFgz-LgiIdSY188tyR5WwsQyl-w",{"title":451,"description":452,"link":453,"config":458},"Research Report: The Intelligent Software Development Era","A global survey of 3,000+ DevSecOps practitioners reveals the skills, tools, and strategies that can make or break a team’s ability to deliver more secure software faster with AI in 2026 and beyond.",{"text":454,"config":455},"Read the report",{"href":390,"dataGaName":456,"dataGaLocation":457},"The Intelligent Software Development Era","thesource",{"slug":13},{"id":460,"title":461,"body":6,"category":6,"config":462,"content":463,"description":6,"extension":41,"meta":478,"navigation":43,"path":479,"seo":480,"slug":12,"stem":481,"testContent":6,"type":482,"__hash__":483},"theSourceAuthors/en-us/the-source/authors/bryan-ross.yml","Bryan Ross",{"layout":9},[464,476],{"componentName":465,"type":465,"componentContent":466},"TheSourceAuthorHero",{"config":467,"name":461,"role":471,"bio":472,"headshot":473},{"gitlabHandle":468,"twitterXProfileUrl":469,"linkedInProfileUrl":470},"bryanrossuk","https://twitter.com/bryanrossuk","https://www.linkedin.com/in/bryanross","Field CTO","With over 15 years of industry experience as a senior IT leader, Bryan helps customers realize business value from IT faster. Equally comfortable speaking with executives and engineers alike, he bridges the gap between technical and business stakeholders through compelling storytelling and real-world examples. With a knack for delivering authentic, impactful messages, he enjoys helping others at the intersection of technology, people and process.",{"altText":461,"config":474},{"src":475},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1751463324/mvdyvskii4hltdrgqxom.jpg",{"componentName":477,"type":477},"TheSourceArticlesList",{},"/en-us/the-source/authors/bryan-ross",{"title":461},"en-us/the-source/authors/bryan-ross","author","fSon_pjQKF1SoSOt3Vg6MC6j1m9Ej0ODYs8fCB-gyB8",{"id":425,"title":426,"body":6,"category":6,"config":485,"content":486,"description":6,"extension":41,"meta":495,"navigation":43,"path":445,"seo":496,"slug":7,"stem":447,"testContent":6,"type":448,"__hash__":449},{"layout":9},[487,491],{"componentName":430,"type":430,"componentContent":488},{"title":404,"description":432,"image":489},{"config":490},{"src":435},{"componentName":437,"type":437,"componentContent":492},{"config":493},{"sourceCTAs":494},[441,442,443],{},{"title":404,"description":432,"ogImage":435},[498,506,515],{"config":499,"title":500,"description":501,"link":502},{"slug":442},"Navigating AI maturity in DevSecOps","Read our survey findings from more than 5,000 DevSecOps professionals worldwide for insights on how organizations are incorporating AI into the software development lifecycle.",{"text":454,"config":503},{"href":504,"dataGaName":505,"dataGaLocation":457},"/resources/developer-survey/2024/ai/","Navigating AI Maturity in DevSecOps",{"config":507,"title":508,"description":509,"link":510},{"slug":443},"AI guide for enterprise leaders: Building the right approach","Download our guide for enterprise leaders to learn how to prepare your C-suite, executive leadership, and development teams for what AI can do today — and will do in the near future — to accelerate software development.",{"text":511,"config":512},"Read the guide",{"href":513,"dataGaName":514,"dataGaLocation":457},"/the-source/ai/ai-guide-for-enterprise-leaders-building-the-right-approach/","AI Guide For Enterprise Leaders: Building the Right Approach",{"config":516,"title":517,"description":518,"link":519},{"slug":441},"How to get started using AI in software development","Learn how to strategically implement AI to boost efficiency, security, and reduce context switching. Empower every member of your team with AI capabilities.",{"text":520,"config":521},"Download the guide",{"href":522,"dataGaName":523,"dataGaLocation":457},"/the-source/ai/getting-started-with-ai-in-software-development-a-guide-for-leaders/","How to Get Started Using AI in Software Development",1776432826573]