DEVOURED
DASH 2026 Security & Compliance: Guide to Datadog's newest announcements
Datadog unveiled autonomous threat hunting agents and AI-native security remediation tools at DASH 2026.
What: Datadog introduced 'Bits' AI agents for threat hunting and incident response, expanded Code Security with AI-native SAST, and achieved FedRAMP High certification, alongside a new identity-aware API authentication model.
Why it matters: Security tooling is shifting from passive monitoring to active, AI-orchestrated remediation, where agents not only identify vulnerabilities but also generate and suggest PR fixes in real-time.
Takeaway: If you use Datadog, migrate your legacy API application keys to the new scoped credential types like Service Access Tokens (SATs) or Workload Identity Federation before the Q3 2026 legacy deprecation.
Deep dive
- Bits agents provide autonomous threat hunting and SIEM investigations.
- AI-native SAST uses LLMs to reduce false positives in vulnerability detection.
- Code Threat Detection monitors pull requests for supply chain threats.
- Supply Chain Firewall blocks malicious npm and pip packages at installation.
- New API authentication includes Workload Identity Federation and customer-managed OAuth.
- FedRAMP High certification enables use by US federal agencies and regulated industries.
- Dynamic routing automatically directs security notifications to relevant service owners.
Decoder
- SAST (Static Application Security Testing): A methodology that examines application source code for security vulnerabilities without executing the program.
- SIEM (Security Information and Event Management): Software that aggregates and analyzes log data from across an organization to identify security threats.
- FedRAMP High: A stringent federal security authorization for cloud services handling mission-critical data.
Original article
Full article content is not available for inline reading.
Explore all 71 articles in today's digest
Fresh dev news, AI-digested daily. Never miss a trend at devoured.fyi