{"id":29314,"date":"2026-03-27T12:47:34","date_gmt":"2026-03-27T11:47:34","guid":{"rendered":"https:\/\/whiteduck.de\/white-duck-news-march-2026\/"},"modified":"2026-09-29T14:44:29","modified_gmt":"2026-09-29T12:44:29","slug":"white-duck-news-march-2026","status":"publish","type":"post","link":"https:\/\/whiteduck.de\/en\/white-duck-news-march-2026\/","title":{"rendered":"white duck News March 2026"},"content":{"rendered":"

Three topics are currently shaping our work and conversations with our customers: sovereignty, security, and speed<\/strong>. In this issue, we show you how to develop AI-native applications in compliance with GDPR, secure agentic AI systems against new attack vectors, and efficiently integrate Azure, development, and operations. Plus: new releases of Flock and Token Control, webinars, and events. <\/p>\n

Enjoy reading!<\/p>\n

Company News<\/h2>\n
\n
\n

\ud83c\udf89 “AI Apps on Microsoft Azure” Specialization Achieved<\/h3>\n

\"\"<\/a>We have reached another milestone in our partnership with Microsoft: our third Advanced Specialization \u2013 “AI Apps on Microsoft Azure”.<\/p>\n

This quality seal confirms our expertise in designing and developing secure, production-ready AI solutions on Azure through external audits and customer references. Together with our existing specializations, it underscores our commitment to being your reliable partner for cloud and AI. <\/p>\n<\/div>\n

<\/figure>\n<\/div>\n

Read the blog post.<\/a>\"\"<\/a><\/p>\n

 <\/p>\n

\n
<\/figure>\n
\n

Stephan H\u00fcttner – Our Head of Platform Engineering<\/h3>\n

\"\"With Stephan H\u00fcttner, an experienced platform and Kubernetes expert is taking on the role of Head of Platform Engineering at white duck. With his background in software development and deep understanding of DevOps synergies, he will play a central role in expanding our platform engineering offerings and supporting customers holistically in developing and operating modern cloud platforms. This step underscores the company’s strategic focus on scalable, efficient, and integrated cloud solutions. <\/p>\n

Read the blog post.<\/a><\/p>\n<\/div>\n<\/div>\n

\n

\ud83c\udf82 10 Years of SLASCONE<\/h3>\n

\"\"We are proud to celebrate 10 years of innovation with SLASCONE<\/a>, our sister company! From the first ideas to an established Azure-based licensing platform for software vendors (ISVs), the product has evolved into a reliable engine for modern software and IoT business models. Together with our customers and partners, we have achieved important milestones \u2013 and that is exactly what motivates us to continue setting new standards in software licensing. <\/p>\n

Learn more.<\/a><\/p>\n<\/div>\n

Managed Services & Sovereignty\"\"<\/a><\/h2>\n
\n

\ud83e\udd1d Everything from One Source: Azure, Development, Operations<\/h3>\n

\"\"Three partners for Azure subscriptions, development, and operations? That can work \u2013 but requires coordination, knowledge transfer, and clear responsibilities. In practice, this often creates friction. <\/p>\n

Our approach: “We built it, we run it.” The same engineers who developed your solution also handle operations. No knowledge transfer needed, one point of contact, one responsibility. In the blog post, you will learn why this is particularly relevant for CTOs and IT managers in mid-sized companies.<\/p>\n

Read the blog post.<\/a><\/p>\n<\/div>\n

\n
\n

\ud83c\uddea\ud83c\uddfa Sovereignty and Innovation: Not a Contradiction<\/h3>\n

\"\"AI-native applications and European data sovereignty \u2013 for a long time, this seemed like an either-or choice. Those days are over. In our new blog post, we show how companies can combine both with the right mix of hyperscalers like Azure and European cloud providers: innovation speed and data control. <\/p>\n

In focus: Microsoft’s new commitments for Europe, the three pillars of Sovereign Solutions (Public, Private, Partner Cloud), and why platform engineering is the key to a hybrid sovereignty strategy.<\/p>\n

Read the blog post.<\/a><\/p>\n

\"\"<\/a><\/p>\n<\/div>\n<\/div>\n

Agentic AI<\/h2>\n
\n

\ud83c\udfac Webinar Series: The Future of Software Development<\/h3>\n

\"\"A<\/strong>gentic AI <\/strong>and Agentic DevOps<\/strong> are becoming strategic levers for speed, quality, and competitiveness. In our three-part webinar series, we show how companies can accelerate their software development with AI agents, reorganize teams, and sustainably reduce their time-to-market. <\/p>\n

In focus: governance, security, spec-driven development, and cloud-native architectures on Azure. Practical use cases, proven architectures, and concrete recommendations for 2026. <\/p>\n

Watch the videos.<\/a><\/p>\n<\/div>\n

\n

\ud83d\udd12 Webinar Series: Secure Agentic AI<\/h3>\n

\"\"Together with our partner ADN, we hosted a three-part webinar series on the security of agentic AI systems. All webinars have already taken place and are available as recordings: <\/p>\n

\ud83c\udfa5 When AI Becomes a Gateway: Live Hijack of an Agentic AI System<\/a><\/p>\n

\ud83c\udfa5 DevSecOps for AI-Native Systems: From Code to Operations<\/a><\/p>\n

\ud83c\udfa5 <\/strong>Protect Your Agentic AI System<\/a><\/p>\n

From prompt injection to tool abuse to RAG poisoning: we show new attack vectors and how to secure your AI systems with robust guardrails.<\/p>\n

Watch the videos.<\/a><\/p>\n<\/div>\n

\n

\ud83d\udc1d Flock v0.5.400: OpenClaw Integration for Enterprise Agentic AI<\/h3>\n

\"\"Our open-source AI agent framework Flock supports OpenClaw as a first-class pipeline participant starting with version 0.5.400. OpenClaw \u2013 with over 337,000 GitHub stars, one of the fastest-growing open-source projects \u2013 brings AI agents that truly act: send emails, manage calendars, edit files, research on the web. <\/p>\n

What OpenClaw lacked was enterprise orchestration. That is exactly what Flock delivers: typed data flows, parallel execution, security boundaries between tenants, and end-to-end observability. What this enables: autonomous code reviews with actual test execution, parallel research with intelligent synthesis, or content pipelines with live data enrichment. <\/p>\n

Read the blog post.<\/a><\/p>\n

View the repo & release notes.<\/a><\/p>\n<\/div>\n

\n
\n

IAMCP TechTalk \u2013 Microsoft Foundry: The New AI Agent Platform<\/h3>\n

\"\"<\/a>In the IAMCP Community TechTalk, we presented the new Microsoft Foundry: the rebranding of Azure AI Foundry with a completely new portal. We showed what has changed \u2013 from 11,000+ models and 1,400+ MCP tools to the visual workflow builder for multi-agent orchestration to centralized AI asset management. Including live demo and Q&A. <\/p>\n

Watch the recording.<\/a><\/p>\n<\/div>\n

<\/figure>\n<\/div>\n

AI Operations & Governance<\/h2>\n
\n

Token Control 5.0: More Flexibility, More Control, More Clarity<\/h3>\n

\"\"AI governance should support existing processes, not complicate them. That is exactly where Token Control 5.0 comes in: with more transparency for teams and precise control options for organizations. <\/p>\n

The new version helps keep AI usage in view across teams, centrally manage deployments and models, and efficiently implement organizational rules such as budgets, approvals, and traceability.<\/p>\n

Read the blog post.<\/a><\/p>\n<\/div>\n

\n

\ud83d\udcb0 Token Control: Control AI Costs Before They Occur<\/h3>\n

\"\"AI workloads generate costs differently than traditional cloud resources: agents trigger multiple model calls in seconds, token consumption occurs in bursts, new prompts cause budget spikes in minutes. Azure Cost Management delivers this data only with an 8 to 72-hour delay \u2013 too late for operational control. <\/p>\n

Token Control <\/strong>closes this gap. Every model call is captured directly in the request flow and assigned in a structured manner. Budgets and policies take effect where usage occurs \u2013 not in downstream reporting. This transforms AI governance from a reactive reporting topic into an active component of your platform. <\/p>\n

Read the blog post.<\/a><\/p>\n<\/div>\n

News from Our Customers<\/h2>\n
\n

\ud83c\udf93 “Stelli”: From Student Project to Go-Live<\/h3>\n

\"\"<\/p>\n

“Stelli”, the AI chatbot on the website of the Digital Startup Center Stellwerk18<\/a> in Rosenheim, answers questions about startups, offerings, and events \u2013 quickly and context-based.<\/p>\n

What began as a proof of concept at the 2025 project fair of TH Rosenheim is now a production solution. Students implemented the project, supported by our architecture guidance, code reviews, and security and operations know-how \u2013 including AI governance with Token Control. <\/p>\n

A strong example of regional cooperation between Rosenheim Technical University, Stellwerk18 with the real application scenario, and white duck as technology and AI partner.<\/p>\n

Read the blog post.<\/a><\/p>\n<\/div>\n

Events<\/h2>\n
\n

Cloud Native Summit Munich 2026<\/h3>\n

\"\"June 29-30, 2026, <\/strong>smartvillage Bogenhausen, Munich \u2013 The Cloud Native Summit Munich is already in its fifth year! Two days of technical talks, hands-on workshops, and networking with the cloud-native and open-source community. In focus: AI engineering, cloud native, Kubernetes, observability, and platform engineering. <\/p>\n

The event is organized by the community for the community \u2013 including us at white duck. Whether you are a developer, platform engineer, AI engineer, or IT professional: secure your ticket now! <\/p>\n

\ud83c\udf9f\ufe0f Get tickets.<\/a><\/p>\n<\/div>\n

Good to Know<\/h2>\n
\n

\ud83d\udd10 Terraform Scaffolding for Azure \u2013 Now Secretless with OIDC<\/h3>\n

\"goodSecrets in CI\/CD pipelines are a persistent issue: they must be rotated, can be leaked, and are a popular attack vector. With the update of our open-source Terraform scaffolding for Azure, that is a thing of the past. <\/p>\n

OIDC is now the default. No client secret in Key Vault, no pipeline variables, nothing that can be rotated or leaked. GitHub Actions and Azure DevOps authenticate directly with Azure via short-lived tokens. The repository provides a setup script that provisions everything needed in five minutes, including migration instructions for existing setups. <\/p>\n

Read the blog post.<\/a><\/p>\n<\/div>\n

\n
\n

LinkedIn Agentic DevOps Series<\/h3>\n

\"\"The future of software development has begun, and it is agentic!<\/p>\n

In the coming weeks, we will share our insights and practical experiences around Agentic DevOps with you on LinkedIn.<\/p>\n

What to expect:
\n\u2714\ufe0f Why human productivity is reaching its limits
\n\u2714\ufe0f How AI agents become part of our org charts
\n\u2714\ufe0f What Agentic DevOps specifically means
\n\u2714\ufe0f 55% faster development \u2013 the numbers behind it
\n\u2714\ufe0f Vibe coding vs. spec-driven development
\n\u2714\ufe0f Security in the age of AI development
\n\u2714\ufe0f GitHub as the center of Agentic DevOps
\n\u2714\ufe0f How to measure success (DORA & SPACE metrics)<\/p>\n

\ud83c\udfaf Whether you are a CTO, engineering manager, or developer \u2013 this series gives you practical insights into the next evolution of software development.<\/p>\n

Visit LinkedIn.<\/a><\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Three topics are currently shaping our work and conversations with […]<\/p>\n","protected":false},"author":6,"featured_media":29333,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[583],"tags":[626,631,575,580,610,718],"class_list":["post-29314","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-company-news-2","tag-agentic-devops-2","tag-agenticai-2","tag-azure-2","tag-cloud-native-2","tag-digital-sovereignty","tag-security-2"],"acf":[],"_links":{"self":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts\/29314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/comments?post=29314"}],"version-history":[{"count":0,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/posts\/29314\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/media\/29333"}],"wp:attachment":[{"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/media?parent=29314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/categories?post=29314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/whiteduck.de\/en\/wp-json\/wp\/v2\/tags?post=29314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}