The application portfolio management (APM) discipline monitors the business, technical and cost fitness of the application portfolio. It uses factual information and analysis, allowing objective and transparent decisions. Its main objective is to identify, prioritize and propose opportunities to improve the portfolio. Opportunities include replacements, migration, modernization, consolidation and decommissioning. APM tools support the people, processes and information of the APM IT discipline to discover, monitor, analyze and visualize the fitness of the application portfolio and provide recommendations for improvement.
Gartner defines the application security testing (AST) market as the buyers and sellers of products and services designed to analyze and test applications for security vulnerabilities. This market is highly dynamic and continues to experience rapid evolution in response to changing application architectures and enabling technologies. AST tools are offered either as software-as-a-service (SaaS)-based subscription offerings, or less often, as on-premises software. Many vendors offer both options.
Cloud management tooling enables organizations to manage hybrid and multicloud (that is, on-premises, public cloud and edge) services and resources. This includes providing governance, life cycle management, brokering and automation for managed cloud infrastructure resources across multiple functional areas. The tooling can be procured and operated by central IT organizations, such as I&O, cloud center of excellence (CCOE) and platform engineering/operations, or within specific lines of business. It can be deployed on-premises, in a customer’s public cloud account or purchased as a SaaS.
Gartner defines Software Composition Analysis (SCA) as a technology that analyzes applications and related artifacts (containers, registries, etc.) to detect open-source and third-party software components known to have security and functional vulnerabilities, are out-of-date for security patches, or that pose licensing risks. SCA products and services help ensure the enterprise software supply chain includes only secure components and, therefore, supports secure application development and assembly
Gartner defines software engineering intelligence (SEI) platforms as solutions that provide software engineering leaders data-driven visibility into the engineering team’s use of time and resources, operational effectiveness, and progress on deliverables. This data-driven visibility enables software engineering leaders and their teams to make smarter business decisions, which leads to the delivery of increased value to customers. SEI platforms must be able to ingest and analyze the signals created by common engineering tools and systems. They must provide rich, tailored, role-specific user experiences to enable leaders to more easily query data to identify important trends and gain contextual insights. Software engineering intelligence platforms are used by software engineering leaders and their teams to better understand how software solutions are being built and delivered. Teams can more easily see where they are spending time and how they are approaching code quality (e.g., code reviews), and better understand team flow through key metrics like deployment frequency and cycle time. These platforms serve as a single source of truth for engineering data, providing a unified, comprehensive and transparent view of the engineering processes. Key engineering metrics for delivering digital products include team productivity, business alignment, software quality and operations effectiveness. Organizations can use SEI platforms to better understand their software development life cycle and gain insights into how their teams build software. These organizations can use these insights to continually adjust, experiment with and improve their processes and practices, yielding improved business alignment, higher quality software and happier, more productive teams.