DevOps Sauna from Eficode

Send us Fan MailSecurity has long been treated like a necessary expense—but what if that thinking is holding your business back?In this episode, Pinja sits down with Kalle Sirkesalo to challenge the traditional narrative around security. Instead of focusing on risk avoidance and compliance, they explore how security can actively drive revenue, accelerate AI adoption, and enable faster, safer innovation.From the ROI trap of fear-based thinking to the reality of AI-powered development pipelines, this conversation dives into why organizations that treat security as a growth enabler—not a blocker—are the ones that scale.You’ll learn:Why security loses funding—and how to flip the narrativeHow AI is reshaping both risk and opportunityWhat “built-in” security actually looks like in modern pipelinesWhy developer experience and security must evolve togetherA practical way to align security with business goalsSecurity isn’t just about preventing loss—it’s about unlocking what’s possible. 

Send us Fan MailEveryone says they have observability—but are they actually using it?In this episode, Pinja and Stefan unpack the gap between collecting data and creating real value. From DevEx and faster debugging to experimentation and business insights, observability only works when it’s treated as a product—not just a dashboard.If your observability stack feels more like noise than insight, this one’s for you.

Send us Fan MailAI agents are evolving fast, but are we actually ready for them?In this episode, we explore the real state of agentic AI and what it means for the future of work. From Anthropic’s latest research to real-world adoption gaps, we unpack where the technology is today versus where it’s heading. We dive into how AI is already transforming coding, knowledge work, and even everyday tasks like creating slides, while raising bigger questions about jobs, productivity, and human collaboration.Will AI replace roles, or create entirely new ones? And how should organizations adapt before the gap between capability and adoption gets even wider?

Send us Fan MailAI copilots are everywhere in software development today. But the real transformation is only beginning.In this episode of DevOps Sauna, Pinja and Stefan explore the Agentic Shift — the move from AI assistants that respond to prompts toward autonomous agents that can pursue goals, make decisions, and act independently inside complex systems.They discuss what it really takes for organizations to move from AI copilots to AI coworkers, including data readiness, governance, security, and organizational maturity. Because deploying autonomous agents is not just a technical challenge — it’s also about responsibility, guardrails, and understanding the risks of letting AI operate with increasing autonomy.You’ll also hear how concepts like domain-driven design, bounded contexts, and incident response automation may shape the first real use cases for autonomous AI agents in DevOps environments.If your organization is experimenting with AI today, this conversation will help you understand what the next phase of AI adoption actually looks like.

Send us Fan MailAI is moving fast. Regulation is catching up.In this episode of the DevOps Sauna, Pinja and Stefan are joined by Nora Fosse from Eficode to break down what AI governance really means in 2026.With the EU AI Act coming into force and fines up to 7% of annual turnover, governance is no longer optional. But is it a brake on innovation or the engine that enables scale?They explore the four pillars of AI governance and why, in the age of autonomous agents, hope is not a strategy.

Send us Fan MailAI is everywhere, but the real cost often stays hidden.In this episode of DevOps Sauna, Pinja and Stefan dive into AI FinOps and explore why GPUs are expensive and why so much AI infrastructure ends up underutilized. They unpack hidden costs like idle hardware, power consumption, networking, and data movement, and explain why traditional Cloud FinOps doesn’t fully apply to AI workloads.They also discuss how Kubernetes and Dynamic Resource Allocation (DRA) can help improve GPU utilization, and why visibility, ownership, and organizational maturity matter just as much as tooling.

Send us Fan MailInternal developer platforms are no longer just technical tooling. In this episode, Pinja and Stefan explore why your internal developer platform should be treated like a customer-facing product.They discuss user-centric platform design, adoption and shadow platforms, lifecycle management, roadmapping, and continuous improvement. From developer experience and security to cost visibility and business alignment, this episode breaks down what it really means to build and run an IDP that people actually want to use.If you’re building a platform, build it like you mean it.

Send us Fan MailIn this episode of DevOps Sauna, Pinja Kujala and Stefan Poulsen break down the six key trends shaping the software development lifecycle in 2026.From the move from AI copilots to autonomous agents, to governance, regulation, cloud sovereignty, platform engineering, and AI cost optimization, this episode offers a practical look at what these shifts mean for modern organizations.A must-listen for CTOs, C-level leaders, and anyone working across DevOps and platform engineering.

Send us Fan MailIn this episode of DevOps Sauna, Pinja and Stefan unpack what a good incident response actually looks like, from the moment an issue is discovered to recovery, communication, and learning afterward.They dive into real-world incident management practices: defining incident severity, assigning the right roles, running mock incidents, validating backups, and communicating clearly without panic. The conversation also tackles one of the hardest topics in engineering culture: blameless postmortems and psychological safety.If you care about DevOps, security, platform engineering, or building resilient teams that learn from failure rather than hide it, this episode is for you.

Send us Fan MailWho really controls your cloud, and why does it matter now?In this episode of DevOps Sauna, Pinja and Stefan dive into Europe’s growing shift toward sovereign cloud. They explore what’s driving the conversation, from data sovereignty and GDPR to geopolitical uncertainty and upcoming EU regulations. The discussion breaks down how different countries approach sovereign cloud, what this means for cloud providers and enterprises, and how DevOps teams are affected in practice.From Kubernetes and managed services to AI workloads and vendor lock-in, this episode helps you understand why sovereign cloud is becoming a strategic concern and what organizations should consider as control, compliance, and ownership take center stage in cloud strategy.

Send us Fan MailOpen source powers nearly everything we build today—but what is it actually worth? Pinja and Stefan discuss Harvard’s $8 trillion estimate, how widely open source is used, and why central registries are under pressure. They touch on security risks, supply chain attacks, and what the EU Cyber Resilience Act means for companies using OSS. Finally, they look ahead at how AI and coding assistants might reshape open source development.

Send us Fan MailIn this episode of DevOps Sauna, Pinja and Stefan talk about what truly makes a developer platform successful—and why forcing adoption never works.They explore the “coffee and cookie principle,” the importance of trust between developers and platform teams, and how to create platforms people actually want to use.Topics include building developer trust, identifying platform ambassadors, balancing freedom and governance, and strengthening collaboration across teams.Whether you’re building your first internal platform or refining an existing one, this episode offers practical insights and real-world stories from the field of platform engineering.

Send us Fan MailWhat does it take to make AI truly trustworthy? Pinja and Stefan talk with Lofred Madzou, CEO of Skillmind, about responsible AI, governance, and strategy—plus why organizational culture matters more than hype. Lofred also shares his inspiring work with the African Olympiad Academy, nurturing the next generation of science innovators across Africa.

Send us Fan MailDevOps “culture” gets blamed for everything—so what is it, really? Pinja and Eficode consultant Dan Khurram cut through the buzzwords to define culture in practical terms: how decisions get made, what behaviors are acceptable, and how teams talk about uncertainty and failure. They compare textbook “DevOps culture” to actual corporate culture, then borrow lessons from high-stakes domains like aviation and healthcare on learning from incidents instead of hiding them. Along the way: onboarding as your first culture signal, Microsoft’s “learn-it-all” shift, and three takeaways you can apply now—don’t call it a culture change, define your “why” for your context, and start locally so good habits spread. If your transformation feels like more ceremonies than substance (hello, Jira), this episode gives you a clearer map. 

Send us Fan MailIn this month’s DevOps Sauna news roundup, Pinja and Stefan unpack the biggest stories shaking the software world. Atlassian made major moves with billion-dollar acquisitions of DX and the AI-powered browser company behind Arc and Dia. GitHub tightens supply chain security after recent NPM attacks, while open source communities tackle burnout and project handovers.The duo then dives into the shifting AI landscape—from XAI’s massive layoffs and declining corporate AI adoption to NVIDIA’s staggering $100 billion investment in OpenAI. They also discuss GitHub Copilot’s new tech-debt-fighting agents and Kubernetes’ long-awaited Dynamic Resource Allocation going GA.Tune in for sharp insights, lighthearted banter, and the human touch that even AI can’t replace.

Send us Fan MailAre password changes really keeping us secure? Is writing passwords in a notebook always bad? Can Apple devices really not get viruses? In this episode of DevOps Sauna, Pinja and Darren take on some of the most common myths around cybersecurity. From password managers, MFA, and VPNs, to cloud security, insider threats, and even the risks of random USB sticks—no misconception is safe. Join us as we separate fact from fiction and uncover how security really works in practice.

Send us Fan MailIn this episode, Pinja and Darren take a critical look at the state of DevSecOps through the lens of three recent industry reports from Snyk, Checkmarx, and Datadog. From “shift left” gone wrong, to the cultural gaps between development and security teams, to metrics that don’t always measure what matters—what’s really happening with security in DevOps today?They discuss whether DevSecOps is truly “dead,” or simply in need of a reset, and explore practical steps teams can take to rebuild trust, reduce friction, and embed security as a natural part of development. Plus: the risks AI introduces into DevOps security, and why small steps can still make a big difference.

Send us Fan MailIn this episode of DevOps Sauna, Pinja and Darren sit down with Eficode’s Lead AI Consultant, Henri Terho, to unpack the hype and realities around artificial intelligence in business. They explore why so many AI projects fail, what true success looks like, and how companies can actually see return on investment. From data quality challenges and security concerns to the legal landscape and the so-called “AI bubble,” the conversation digs into both the risks and the opportunities of AI transformation. Whether you’re curious about strategy, implementation, or the future of work, this episode sheds light on how organizations can make AI truly pay off.

Send us Fan MailA major security incident shook the JavaScript world when malicious code was discovered in 20 widely used NPM packages, collectively downloaded over 2 billion times per week. In this episode, Pinja and Darren break down what happened, how a phishing email led to the breach, and why human error remains one of the biggest risks in cybersecurity.They explore the scope of the attack, its surprisingly small financial impact, and the broader lessons around open-source trust, dependency management, and the need for SBOMs. Plus, they discuss how tools like DependencyTrack can help developers protect their software supply chains, and why transparency in mistakes—like that shown by maintainer Josh Junon—is essential to building a stronger security culture.

Send us Fan MailIn this episode of DevOps Sauna, Pinja and Darren dive into one of the most pressing topics of our time: the ethics of AI. From copyright infringement and data usage to environmental impact and corporate responsibility, they unravel the hidden costs behind today’s AI boom.They explore how big tech handles data, the consequences of AI monopolies, and why regulation is a double-edged sword. Most importantly, they discuss what individuals, companies, and the industry at large can do to ensure AI is used ethically and responsibly.If you’ve ever wondered whether AI can be ethical—or how you can use it more responsibly—this conversation is for you.

Send us Fan MailIn this summer catch-up episode of DevOps Sauna, Darren and Pinja dive into the biggest tech and culture stories of the past months. From OpenAI’s failed Windsurf deal and Google’s licensing swoops, to Sam Altman calling AI a bubble and GitHub’s leadership shake-up, they explore how AI, security, and open-source are reshaping the industry. They also unpack Nvidia’s $4 trillion milestone, US and EU AI regulation battles, and a surprising study on insecure code releases. And to close on a lighter note, they celebrate the global spread of Finnish sauna culture—now floating on rivers in Australia.

Send us Fan MailAs summer holidays roll in, Pinja and Darren take a step back from the usual deep dives into DevOps to reflect on the past six months of the DevOps Sauna. From endless AI debates and myth-busting episodes (“Is Jenkins dead?”) to accessibility, platform engineering at the edge, and even a full episode on sauna culture, they revisit the highlights, surprises, and fun along the way. They also share some of Eficode’s recent wins, welcome a new CEO, and admit to pulling off a very Finnish April Fools’ episode. Join us for a lighter, summer-ready conversation that celebrates both the serious and the silly moments from the podcast so far.

Send us Fan MailIn this episode, we celebrate winning Atlassian’s Partner of the Year – World-Class Software Development award and explore what it truly means. CTO of Managed Services Kalle Sirkesalo joins Darren and Pinja to discuss how Eficode transforms the way teams build software—focusing on culture, tools, processes, and people over code. From AI and platform engineering to security and feedback loops, we unpack how to create lasting impact in modern software development.

Send us Fan MailIn the final episode of their mini-series on platform engineering at the edge, Darren and Pinja dive deep into the often-overlooked security risks of edge and IoT environments. From car key hacks and USB-based keyboard attacks to ransomware targeting medical devices and smart cities, they reveal how proximity and physical access change the rules of cybersecurity. You’ll also hear practical ways to secure your edge platforms, the role of platform engineering in remote monitoring, and how upcoming EU regulations like NIS2 and the Cyber Resilience Act may shape the future.

Send us Fan MailDarren and Pinja continue their series on platform engineering on the edge by diving into some of the most fascinating real-world use cases. From software updates on the Voyager space probes and Antarctic research stations to cars, planes, and even grocery delivery robots, they explore how platform engineering makes these edge deployments reliable, self-healing, and secure. This episode is full of stories and lessons on what it takes to manage software far beyond traditional data centers and clouds.

Send us Fan MailDarren and Pinja break down the basics of platform engineering on the edge, from the “boring” to the truly remote and unreachable. They explore how GitOps, Kubernetes, and infrastructure as code enable reliable software updates in spotty or disconnected environments—whether in cars, factories, ships, or even Mars rovers—and why getting edge engineering right matters now more than ever.

Send us Fan MailDarren and Pinja dive into the risks of “vibe coding,” discussing how AI-generated code, supply chain attacks, and typosquatting increase security challenges, and explore practical ways to secure dependencies and prepare for the future of AI-driven development.

Send us Fan MailPatrick Debois, known as the father of DevOps, joins Darren Richardson and Pinja Kujala to discuss the future of software development, the evolving role of AI in the SDLC, and how developer experience and human judgment fit into an increasingly automated world.

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala sit down with Jamie Dobson to explore his new book Visionaries, Rebels, and Machines—a high-energy journey through the breakthroughs and lucky accidents that pushed technology from steam engines to today’s AI-powered cloud.Learn how adopting AI-led DevOps practices can supercharge your teams and set your organization on the path to becoming truly AI-native: https://www.eficode.com/services/ai-success-roadmap-for-software-development

Send us Fan MailCelebrating the 200th episode of the DevOps Sauna podcast, Darren Richardson and Pinja Kujala are joined by longtime Eficodeans, Ilari Nurmi, Henri Hamalainen, and Marko Klemetti, to reminisce and celebrate the history of Eficode and the company's 20th anniversary.NOTE: This episode was recorded to celebrate our company’s 20th anniversary and features a conversation with Ilari, who—at the time—was serving as Eficode's CEO. Since then, Ilari has moved on from the company.We want to take a moment to thank him for his incredible leadership over the past six years, a period marked by remarkable growth. His impact on our journey will be lasting, and we’re grateful to have captured his reflections during such a meaningful milestone.

Send us Fan MailIn this episode of the DevOp Sauna, Darren Richardson and Pinja Kujala are joined by Magnus Sundset, who gives an in-depth look into the origins of IT service management and how the latest tools and principles will affect it in 2025.Learn how mastering ITSM improves service delivery in your organization:https://www.eficode.com/mastering-itsm-to-improve-service-delivery

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala discuss the latest stories and developments in the DevOps space in May 2025, including Klarna, Microsoft, OpenAI buying Windsurf, and new legal legislations such as the Take It Down Act and European Vulnerability Database.Learn how to adopt the best DevOps practices to drive software delivery performance successfully:https://www.eficode.com/devops-transformation

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala discuss DevOps itself, covering its history, impact, and whether we'll need to change the name of this podcast in the future.Adopt the best practices for success by driving software delivery performance with a DevOps transformation:https://www.eficode.com/devops-transformation

Send us Fan MailIn this episode of the DevOps Sauna podcast, Darren Richardson and Pinja Kujala discuss and debunk the infamous question, "Is Agile dead?", highlighting how Agile is utilized in organizations today and how important it remains.Master Agile development and collaboration within your teams using the best practices and principles:https://www.eficode.com/agile-practices

Send us Fan MailIn this special episode of the DevOps Sauna, Darren Richardson and Pinja Kujala are joined by Markus Tihumäki (Accessibility Specialist and Business Developer) and Toni Laakso (Accessibility Specialist) to discuss everything accessibility in celebration of World Accessibility Awareness Day.Design and create future-proof, user-centered digital services with Eficode:https://www.eficode.com/services/design-and-build-digital-services

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala discuss the latest stories and developments in the DevOps space in April 2025, including OpenAI and ChatGPT, open source vs. commercial software, and the new reveals at Atlassian Team '25.Learn how to adopt the best DevOps practices to drive software delivery performance successfully:https://www.eficode.com/devops-transformation

Send us Fan MailIn this special episode of the DevOps Sauna podcast, Darren Richardson and Pinja Kujala take some time away from DevOps to analyze the history and legacy of a critical component of Finnish culture: The sauna.Check out all the episodes of the DevOps Sauna on our website:https://www.eficode.com/devops-podcast

Send us Fan MailIn this episode of the DevOps Sauna podcast, Darren Richardson and Pinja Kujala are joined by Sofus Albertsen, a DevOps Advocate and a Kubernetes expert, to discuss Kubernetes in Edge computing, highlighting various topics including PlanetScale and GitOps.Reach your DevOps goals with us, a Kubernetes-certified provider:https://www.eficode.com/solutions/kubernetes

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala are joined by Dan Khurram to discuss The Future of Software conference on March 26, 2025. They highlight their favorite talks, their experience, and what they learned at the event.Reach your business goals with the right DevOps mindset and tooling:https://efcd.co/3RwCYkt

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala discuss the latest stories and developments in the DevOps space in March 2025, including recent developments with xAI and the coming end of Opsgenie.Reach your business goals with the right DevOps mindset and tooling:https://efcd.co/3RwCYkt

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala discuss the reveal of an exciting new technology created by Eficode: SUAMI (Single Unified AI Metrics Indicator).Find out more about Eficode's groundbreaking measurement system designed to quantify the unquantifiable.https://efcd.co/3EeyQT4

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala review Jenkins, its history, and its current state, highlighting its benefits and future impact on the software industry. Additionally, Darren and Pinja share their thoughts and experiences on relevant talks and topics from The DEVOPS Conference.Jumpstart your continuous journey with Jenkins and Eficode:https://www.eficode.com/solutions/jenkins-ci

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala are joined by Szilárd Széll (DevOps Transformation Lead and Senior Consultant at Eficode), who shares his experience working in testing and quality assurance, his award as Tester of the Year in Finland, and his thoughts on the current landscape.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala are joined by Heidi Waterhouse (Transformation Advocate and Marketing Advisor) to discuss her upcoming book, Progressive Delivery.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala discuss the latest stories and developments in the DevOps scene in February 2024, including Le Chat and the Majorana 1 processor.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala discuss the 50th anniversary of the Helsinki Final Act, its history, and the importance of cybersecurity as a whole.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala are joined by Lauri Palokangas and Henri Hämäläinen to discuss the history of The DEVOPS Conference and highlight why events like The Future of Software are important to the software industry.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala are joined by Heikki Hämäläinen and Hannah Waller to reminisce on the history of DevOps, The DEVOPS Conference, and what to look forward to in The Future of Software.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala round up the latest industry news for January 2025, including current stories on DevOps, technology, and AI.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london

Send us Fan MailIn this episode of the DevOps Sauna, Darren Richardson and Pinja Kujala are joined by Henri Terho to discuss DeepSeek, the newest AI model released from China that's been making headlines on social media. They also share their thoughts on what open source means for AI in general.Sign up for The Future of Software in London (March 26, 2025):https://www.thedevopsconference.com/london