Three topics are currently shaping our work and conversations with our customers: sovereignty, security, and speed. In this issue, we show you how to develop AI-native applications in compliance with GDPR, secure agentic AI systems against new attack vectors, and efficiently integrate Azure, development, and operations. Plus: new releases of Flock and Token Control, webinars, and events.
Enjoy reading!
Company News
🎉 “AI Apps on Microsoft Azure” Specialization Achieved
We have reached another milestone in our partnership with Microsoft: our third Advanced Specialization – “AI Apps on Microsoft Azure”.
This quality seal confirms our expertise in designing and developing secure, production-ready AI solutions on Azure through external audits and customer references. Together with our existing specializations, it underscores our commitment to being your reliable partner for cloud and AI.
Stephan Hüttner – Our Head of Platform Engineering
With Stephan Hüttner, an experienced platform and Kubernetes expert is taking on the role of Head of Platform Engineering at white duck. With his background in software development and deep understanding of DevOps synergies, he will play a central role in expanding our platform engineering offerings and supporting customers holistically in developing and operating modern cloud platforms. This step underscores the company’s strategic focus on scalable, efficient, and integrated cloud solutions.
🎂 10 Years of SLASCONE
We are proud to celebrate 10 years of innovation with SLASCONE, our sister company! From the first ideas to an established Azure-based licensing platform for software vendors (ISVs), the product has evolved into a reliable engine for modern software and IoT business models. Together with our customers and partners, we have achieved important milestones – and that is exactly what motivates us to continue setting new standards in software licensing.
Managed Services & Sovereignty
🤝 Everything from One Source: Azure, Development, Operations
Three partners for Azure subscriptions, development, and operations? That can work – but requires coordination, knowledge transfer, and clear responsibilities. In practice, this often creates friction.
Our approach: “We built it, we run it.” The same engineers who developed your solution also handle operations. No knowledge transfer needed, one point of contact, one responsibility. In the blog post, you will learn why this is particularly relevant for CTOs and IT managers in mid-sized companies.
🇪🇺 Sovereignty and Innovation: Not a Contradiction
AI-native applications and European data sovereignty – for a long time, this seemed like an either-or choice. Those days are over. In our new blog post, we show how companies can combine both with the right mix of hyperscalers like Azure and European cloud providers: innovation speed and data control.
In focus: Microsoft’s new commitments for Europe, the three pillars of Sovereign Solutions (Public, Private, Partner Cloud), and why platform engineering is the key to a hybrid sovereignty strategy.
Agentic AI
🎬 Webinar Series: The Future of Software Development
Agentic AI and Agentic DevOps are becoming strategic levers for speed, quality, and competitiveness. In our three-part webinar series, we show how companies can accelerate their software development with AI agents, reorganize teams, and sustainably reduce their time-to-market.
In focus: governance, security, spec-driven development, and cloud-native architectures on Azure. Practical use cases, proven architectures, and concrete recommendations for 2026.
🔒 Webinar Series: Secure Agentic AI
Together with our partner ADN, we hosted a three-part webinar series on the security of agentic AI systems. All webinars have already taken place and are available as recordings:
🎥 When AI Becomes a Gateway: Live Hijack of an Agentic AI System
🎥 DevSecOps for AI-Native Systems: From Code to Operations
🎥 Protect Your Agentic AI System
From prompt injection to tool abuse to RAG poisoning: we show new attack vectors and how to secure your AI systems with robust guardrails.
🐝 Flock v0.5.400: OpenClaw Integration for Enterprise Agentic AI
Our open-source AI agent framework Flock supports OpenClaw as a first-class pipeline participant starting with version 0.5.400. OpenClaw – with over 337,000 GitHub stars, one of the fastest-growing open-source projects – brings AI agents that truly act: send emails, manage calendars, edit files, research on the web.
What OpenClaw lacked was enterprise orchestration. That is exactly what Flock delivers: typed data flows, parallel execution, security boundaries between tenants, and end-to-end observability. What this enables: autonomous code reviews with actual test execution, parallel research with intelligent synthesis, or content pipelines with live data enrichment.
IAMCP TechTalk – Microsoft Foundry: The New AI Agent Platform
In the IAMCP Community TechTalk, we presented the new Microsoft Foundry: the rebranding of Azure AI Foundry with a completely new portal. We showed what has changed – from 11,000+ models and 1,400+ MCP tools to the visual workflow builder for multi-agent orchestration to centralized AI asset management. Including live demo and Q&A.
AI Operations & Governance
Token Control 5.0: More Flexibility, More Control, More Clarity
AI governance should support existing processes, not complicate them. That is exactly where Token Control 5.0 comes in: with more transparency for teams and precise control options for organizations.
The new version helps keep AI usage in view across teams, centrally manage deployments and models, and efficiently implement organizational rules such as budgets, approvals, and traceability.
💰 Token Control: Control AI Costs Before They Occur
AI workloads generate costs differently than traditional cloud resources: agents trigger multiple model calls in seconds, token consumption occurs in bursts, new prompts cause budget spikes in minutes. Azure Cost Management delivers this data only with an 8 to 72-hour delay – too late for operational control.
Token Control closes this gap. Every model call is captured directly in the request flow and assigned in a structured manner. Budgets and policies take effect where usage occurs – not in downstream reporting. This transforms AI governance from a reactive reporting topic into an active component of your platform.
News from Our Customers
🎓 “Stelli”: From Student Project to Go-Live

“Stelli”, the AI chatbot on the website of the Digital Startup Center Stellwerk18 in Rosenheim, answers questions about startups, offerings, and events – quickly and context-based.
What began as a proof of concept at the 2025 project fair of TH Rosenheim is now a production solution. Students implemented the project, supported by our architecture guidance, code reviews, and security and operations know-how – including AI governance with Token Control.
A strong example of regional cooperation between Rosenheim Technical University, Stellwerk18 with the real application scenario, and white duck as technology and AI partner.
Events
Cloud Native Summit Munich 2026
June 29-30, 2026, smartvillage Bogenhausen, Munich – The Cloud Native Summit Munich is already in its fifth year! Two days of technical talks, hands-on workshops, and networking with the cloud-native and open-source community. In focus: AI engineering, cloud native, Kubernetes, observability, and platform engineering.
The event is organized by the community for the community – including us at white duck. Whether you are a developer, platform engineer, AI engineer, or IT professional: secure your ticket now!
Good to Know
🔐 Terraform Scaffolding for Azure – Now Secretless with OIDC
Secrets in CI/CD pipelines are a persistent issue: they must be rotated, can be leaked, and are a popular attack vector. With the update of our open-source Terraform scaffolding for Azure, that is a thing of the past.
OIDC is now the default. No client secret in Key Vault, no pipeline variables, nothing that can be rotated or leaked. GitHub Actions and Azure DevOps authenticate directly with Azure via short-lived tokens. The repository provides a setup script that provisions everything needed in five minutes, including migration instructions for existing setups.
LinkedIn Agentic DevOps Series
The future of software development has begun, and it is agentic!
In the coming weeks, we will share our insights and practical experiences around Agentic DevOps with you on LinkedIn.
What to expect:
✔️ Why human productivity is reaching its limits
✔️ How AI agents become part of our org charts
✔️ What Agentic DevOps specifically means
✔️ 55% faster development – the numbers behind it
✔️ Vibe coding vs. spec-driven development
✔️ Security in the age of AI development
✔️ GitHub as the center of Agentic DevOps
✔️ How to measure success (DORA & SPACE metrics)
🎯 Whether you are a CTO, engineering manager, or developer – this series gives you practical insights into the next evolution of software development.






