May 2026 Summaries

Firefly now supports VMware vSphere, allowing organizations to integrate their on-premises vSphere environments into a unified, hybrid cloud management platform. This integration addresses the growing trend of hybrid cloud infrastructures, where 63% of organizations operate multi-cloud or hybrid environments, often involving a mix of public cloud and on-premises resources like vSphere. Firefly's platform offers automated Infrastructure as Code (IaC) generation, unified visibility, drift detection, compliance enforcement, and disaster recovery capabilities across both cloud and on-premises environments. By closing the governance gap between these environments, Firefly enables consistent management, security, and resilience, helping enterprises overcome the challenges of maintaining operational consistency, data locality, and regulatory compliance. The platform supports teams in transitioning workloads between on-premises and cloud environments while ensuring real-time visibility and recovery readiness, thus addressing the vulnerabilities that make on-premises infrastructure a target for cyberattacks.

In March 2026, a significant cyberattack on Stryker disrupted global operations, highlighting a critical gap in disaster recovery (DR) strategies, which have traditionally focused on data loss rather than infrastructure collapse. The DR industry, valued at $20 billion, has been addressing the wrong problem by prioritizing databases, storage, and server images over crucial infrastructure components like VPC configurations, security groups, and load balancers. This misalignment became evident during the AWS us-east-1 outage, which affected over 1,000 companies due to infrastructure failures rather than data loss. Cloud Resilience Posture Management (CRPM), introduced by Firefly, aims to rectify this by applying continuous scanning, quantified posture scoring, and automated enforcement to recovery readiness. CRPM's approach includes six key capabilities such as unified inventory, continuous backup validation, resilience scoring, automated policy enforcement, drift detection, and shift-left resilience in CI/CD, ultimately transforming recovery into redeployment by continuously syncing the live cloud state with Infrastructure as Code (IaC). Despite the critical need for infrastructure-level recovery, only a small percentage of organizations have implemented such measures, with many teams lacking formal DR plans altogether. As cloud providers accelerate their release cycles, the gap between infrastructure complexity and recovery readiness widens, necessitating a shift towards measurable and enforceable resilience strategies.

Infrastructure practitioners are increasingly focused on achieving infrastructure immutability and rebuild confidence through Infrastructure as Code (IaC) by 2026, but many teams fall short in fully realizing this goal. Despite widespread adoption of IaC, with pipelines running and modules versioned, only 11% of teams have tested and validated disaster recovery (DR) capabilities, revealing a significant gap between expectations and actual performance. This discrepancy arises from issues such as reliance on manual validation, inadequate codification of infrastructure, and the accumulation of "ClickOps debt," where not all infrastructure elements are represented in code. The 2026 State of Infrastructure as Code report highlights that while most organizations have IaC, they lack the confidence to execute a reliable recovery due to untested DR procedures and incomplete infrastructure codification. As AI agents become more involved in infrastructure management, the need for robust, automated DR capabilities intensifies, making it critical for teams to continuously reconcile code with live cloud states and prioritize codification as an integral part of infrastructure management rather than an afterthought.

Cloud breach post-mortems often fail due to outdated disaster recovery plans that do not match the current infrastructure, with less than 5% of organizations having adopted infrastructure-level recovery capabilities. Effective recovery requires a sequence of steps: establishing a versioned baseline of infrastructure, scoping the blast radius to preserve forensic records, mapping actual resource access rather than relying on permissions, treating configuration drift as a forensic signal, and comparing Infrastructure as Code (IaC) against live deployments. Recovery should follow dependency sequences rather than urgency, assuming the cloud control plane may be unavailable, and restoring to the last known-good state rather than the last state. Compliance requirements must be validated at recovery, and recovery time objectives should be pressure-tested under adverse conditions. The text underscores the importance of treating resilience as an ongoing operational discipline, rather than a one-time setup, to close the gap between theoretical and actual recovery capabilities.

Firefly has expanded its capabilities to support Nebius, a rapidly growing AI cloud provider, by offering automated governance, Infrastructure-as-Code (IaC) orchestration, and instant infrastructure recovery. This integration allows teams running AI workloads on Nebius to experience a unified cloud management system, ensuring that each resource is visible, every environment is codified, and deployments are consistently managed. As the cloud infrastructure landscape evolves, Nebius stands out by optimizing infrastructure for large-scale AI tasks, and Firefly addresses the challenge of managing diverse cloud environments without creating additional silos. Firefly's platform, now including Nebius, provides AI-native remediation, governance, compliance, and waste management, supporting teams with real-time cloud resilience and recovery readiness. It offers a real-time system of record across multi-cloud estates, helping organizations maintain audit-ready, compliant, and cost-effective operations while reducing recovery time objectives (RTOs) during incidents. This development underscores the growing trend of specialized AI cloud providers and the essential need for centralized resilience management in complex multi-cloud environments.

Firefly has been recognized in Gartner's Market Guide for AI Assistants for Infrastructure as Code (IaC), highlighting its capabilities alongside other platforms designed to handle the complexities of modern cloud operations. Gartner's report predicts a significant shift in the IaC market, with expectations that by 2029, 90% of Infrastructure and Operations (I&O) organizations will integrate AI assistants for IaC, up from the current 5%, and 70% of enterprises will use agentic AI for automated IaC generation and drift remediation, a steep rise from less than 1% today. The report points out the structural skills gap in cloud-native infrastructure management, the risks posed by generic AI lacking environmental context, and the unsustainable manual interventions required post-deployment. Gartner emphasizes the need for IaC tools that focus on Day 2 resilience, addressing drift, compliance failures, and cost overruns, rather than just provisioning infrastructure quickly. It underscores the importance of context-aware code generation, continuous drift detection, and proactive policy enforcement, distinguishing purpose-built platforms like Firefly from generic tools. The guide suggests that organizations that establish a solid foundation for AI-driven IaC now will gain advantages in delivery speed, security, and operational resilience, while those that delay may face challenges in closing the gap.