1. Cloud-native
Kubernetes will bridge the gap for GenAI workloads: “In many GenAI applications, enterprises will use RAG with proprietary data, which will often be confidential and sensitive. To address concerns around data security, privacy, and integrity, some will deploy GenAI in their local data center, but many will want to run GenAI across both cloud and on-premises, and Kubernetes will bridge the gap.” – Ratan Tipirneni, president and CEO, Tigera
2. IT
IT skills gap will accelerate lightweight automation: “The global shortage of skilled IT professionals will worsen in 2025, pushing businesses to adopt more lightweight, automated tools. Complex solutions requiring extensive expertise will lose ground to agentless technologies that rapidly simplify deployment and deliver value.”
Rise of Zero Trust beyond devices: “Zero Trust will expand beyond devices and networks to include identity verification frameworks for all digital interactions. With the surge of remote work and decentralized systems, traditional identity models will fall short. This will demand tools capable of tracking and validating user and system behaviors across dynamic IT landscapes.” – Ofer Regev, CTO at Faddom:
3. DevOps
Platform Engineering will be thinner: “Platform engineering has become a path towards DevOps efficiency and developer productivity. In 2025, organizations will realize they can achieve the goals of platform engineering with fewer lines of bespoke code. Instead of trying to build a grand unifying platform, existing tools will provide solutions that reduce fragmentation, apply standards, and integrate security into software delivery.”
Continuous delivery is dead… Long live continuous delivery! “As organizations shift to platform-as-a-service, Kubernetes, and serverless offerings, they often lose good practices along the way. The solid continuous delivery pipelines they created for traditional self-hosted and IaaS environments had solid practices that should be transferred to new environments.” – Steve Fenton, principle DevEx researcher, Octopus Deploy
4. Software Development
Serverless hype is over—facing facts: “Serverless has been hyped as the ultimate solution to scalability and elasticity, but many who adopted it were quickly disappointed by rising costs and maintenance difficulty. There may be no servers, but still, a major effort is needed to deploy and test workloads. Now that the hype is over, we face facts – serverless is a specific tool, suitable only for very specific use cases.”
New types of Developer Portals will emerge: “Developers are now faced with a huge set of tools and services to do their daily work. No single product covers all organizational needs, and many create their solution in-house. Most existing products are just a user interface that needs massive customization. We predict that new players will offer modular solutions and overtake the market.” – Kostis Kapelonis, senior developer evangelist, Codefresh
5. Application security
LLMs will be a double-edged sword for cybersecurity: “With the exploding growth of LLMs, AI risks will continue to grow in prevalence and severity. Existing issues like prompt injection and model misuse will evolve into new threats in tandem with more intelligent models. At the same time, tools powered by LLMs will enhance anomaly detection, automate threat responses, and perform autonomous vulnerability fixes.”
Continuous API testing will enable “Shift Everywhere”: APIs connect microservices, enable third-party integrations, and support cloud-native architectures, representing 83% of internet traffic. Continuous security testing throughout the API lifecycle will be essential (in 2025) to mitigate risks like misconfigurations and injections. AI will be vital for detecting and remediating business logic vulnerabilities.” – Ori Goldberg, CTO and co-founder of Pynt
6. Information Security
“(in 2025) 70% of breaches will come from unknown, undermanaged assets, up from 60% estimated by most analysts today. This will be fuelled by expanding and increasingly complex attack surfaces, cloud migrations, third-party dependencies, and remote work infrastructure. Organizations will be forced to shift from reactive, asset-specific security to a discovery-first approach that focuses on items outside known inventory.”
New leadership mandate for security controls: “In 2025, risk leaders will increasingly focus on ensuring consistent security controls coverage across their IT ecosystems. The question will no longer be, “Do I have the right tools?” Instead, leaders will ask, “Are my key security controls deployed across my entire attack surface?” Consistency and coverage will become the ultimate benchmarks for effectiveness.” – Tim Matthews, CMO, CyCognito
7. Business Continuity
AI-powered backup automation: “2025 will see the beginnings of backup systems with near-zero administrative intervention. AI will learn the intricate patterns of data usage, compliance requirements, and organizational needs, becoming a proactive data management expert, autonomously determining what needs to be backed up and when, including adherence to compliance standards like GDPR, HIPAA or PCI DSS”.
AI-assisted disaster recovery errors: “While AI will dramatically transform disaster recovery processes, we will see in 2025 that it’s not a silver bullet. Mistakes will be made by relying on machines to automate disaster recovery. There will be unfortunate breaches of trust and compliance violations as enterprises learn the hard way that humans need to be part of the DR decision-making process.” – Sebastian Straub, principal solution architect, N2W