Seventh Annual Report Quantifies DevOps Journey, Provides Prescriptive Steps to Help Enterprises Achieve DevOps Success Faster

Portland, OR

Puppet, the standard for automating the delivery and operation of the software that powers everything around us, today announced the findings of the 2018 State of DevOps Report. Over the past seven years, Puppet has surveyed more than 30,000 technical professionals, making this report the largest, most comprehensive and longest-running study on the topic of DevOps. This year’s survey garnered responses from more than 3,000 global technology professionals from organizations of all sizes and within multiple industries. It was written by Puppet and Splunk Inc.* and is sponsored by Amazon Web Services, Cloudability, Cognizant, CyberArk, Diaxion, Eficode and Splunk. 

This year’s report reveals the five stages of DevOps evolution and a pragmatic, prescriptive approach aimed at helping organizations get started with DevOps, replicate and scale existing pockets of success and make forward progress in their DevOps evolution. The 2018 State of DevOps Report maps organizations along an evolutionary scale based on how frequently they are using key practices. Organizations that are employing all the practices with a high frequency are highly evolved, or High. Those organizations employing few practices with low frequency are Low, and those doing some practices sometimes are Medium. Among some of the key findings:

  • In a DevOps evolution, there are many paths to success, but even more that lead to failure—Every organization is different and for most, the DevOps journey isn’t linear. There are many starts and stops along the way, which can kill early momentum and lead to cynicism. Without a prescriptive path forward, organizations are struggling to scale their DevOps success beyond isolated teams. 80 percent of respondent organizations are Medium. Almost 11 percent are Low and just under 10 percent are High. Though DevOps practices have become mainstream, it’s much harder to make the leap from Medium to High than it is from Low to Medium. Thus, organizations can gain a serious competitive advantage if they concentrate on further evolving their DevOps practices.  
  • Executives have a rosier view of their DevOps progress than the teams they manage—For nearly every practice, C-suite respondents were more likely to report that DevOps practices were in frequent use. For example, 64 percent of C-suite respondents believe that security teams are involved in technology design and deployment versus 39 percent at the team level. Additionally, 54 percent of C-suite respondents believe their organization automates security policy configurations versus 38 percent at the team level.
  • Automating security policy configurations is a critical practice at the highest levels of DevOps evolution—Highly-evolved organizations are 24 times more likely to always automate security policy configurations compared to the least evolved organizations. This finding underscores how as organizations evolve, security policy becomes a part of operations, not just an afterthought when an audit looms. In other words, teams are automating security policy configurations initially for their own benefit, and as their understanding evolves, this automation evolves to work for the benefit of the entire organization. 

"While DevOps practices have become far more well known across our industry, organizations continue to struggle to scale pockets of DevOps success more broadly across multiple teams and departments,” said Nigel Kersten, VP of Ecosystem Engineering at Puppet. "This year's report explores the foundational practices that need to be in place in order to scale DevOps success, and proves that success can only scale when teams are enabled to work across functional boundaries."

“This year’s report findings validate that foundational practices have a profound impact on an organization’s overall DevOps evolutionary journey and are key to scaling successes no matter how mature the DevOps transformation is within the organization,” said Andi Mann, Chief Technology Advocate, Splunk. “Splunk’s partnership with Puppet and participation in this report reflects our shared commitment to empower organizations to collaborate across critical boundaries and automate resources for broader use.” 

The full 2018 State of DevOps Report is available for download at

*Report Methodology

The resulting report was written by Puppet and Splunk. Splunk participation includes providing analysis to the report findings, and providing commentary in the “Foundations” and “Culture, Automation, Measurement and Sharing” sections of the report. All other opinions and writings in the report were completed by Puppet.

Supporting Quotes

“Puppet’s State of DevOps 2018 Report highlights that successful DevOps adoption requires organizations to build a foundation of culture, best practices and tools. Organizations scale by reusing the standards and best practices for building applications and services across functional areas. This accelerates time to market and software innovation cycles. Cloudability sees similar patterns as customers integrate continuous cost optimization into their agile operations and IT infrastructure as part of their cloud journey” said Erik Onnen, CTO of Cloudability.

Puppet’s State of DevOps report validates the importance of DevOps and the role it plays in one’s digital transformation journey,” said Sanoj Balakrishnan, Digital Engineering Practice Leader, Banking & Financial Services at Cognizant. “The ability of high performing DevOps teams to ship code faster without compromising quality will enable organizations to innovate better and faster. At Cognizant, we’re committed to building industry winning solutions that help clients compete more effectively in the digital economy by delivering application transformation and development to the enterprise at speed and scale.” 

“Organizations are increasingly adopting DevOps environments in hopes of achieving transformative velocity and innovation,” said Adam Bosnian, Executive Vice President of Global Business Development at CyberArk. “But like any new business initiative, this comes with challenges – and in the case of DevOps, it’s often around establishing and enforcing security policy. As we’ve seen with several high profile breaches, unprotected secrets open organizations up to unnecessary risk. Puppet’s 2018 State of DevOps Report is further validation of the importance of aligning DevOps and security teams, and the critical need to build security policy into development processes early on.”

“Diaxion is proud to be a sponsor of the 2018 State of DevOps Report. The report provides valuable and realistic insight into how organisations of all sizes are approaching, progressing and measuring their DevOps journey with respect to the people (culture), process (remove waste) and technology perspectives to enable company wide adoption versus team or project adoption,” said Tony Wilkinson, MD at Diaxion Pty Ltd. “This year’s report proves that technology is only part of the challenge on the journey, very much it is a cultural change needing people, process and technology aspects to be addressed to unlock the maximum business benefits across the organisation. Diaxion aids organisations in this journey by tying the goals of DevOps to tangible business goals, focusing on wider adoption through people, process and technology streams centred on customer focused DevOps deliverables.”

“The State of the DevOps Report clearly shows how high performing organizations benefit from leveraging the power of automated, digital pipelines and “Moving to the left” paradigm shift in DevSecOps,” noted Marko Klemetti, CTO at Eficode. “Eficode is a proud partner and sponsor of 7th edition of this invaluable industry report. We also see that automating everything in a DevOps pipeline is no longer enough. To further optimize the pipeline, we must incorporate the world of machine learning and cognitive insights.” 

Additional resources

About Puppet

Puppet is driving the movement to a world of unconstrained software change. Its revolutionary platform is the industry standard for automating the delivery and operation of the software that powers everything around us. More than 35,000 companies — including 75 percent of the Fortune 100 — use Puppet’s open source and commercial solutions to adopt DevOps practices, achieve situational awareness and drive software change with confidence. Headquartered in Portland, Oregon, Puppet is a privately held company with more than 500 employees around the world. Learn more at

Media contact