2021 China DevOps Landscape Survey Report Highlights
The 2021 China DevOps Landscape Survey, conducted by the Cloud Computing Open Source Industry Alliance with 1,862 valid responses across multiple sectors, reveals that over half of Chinese enterprises have reached comprehensive DevOps maturity, agile development is widespread, DevSecOps adoption exceeds 50%, and IAST tools, especially Xmirror’s LingMai, dominate the security tooling market.
The Cloud Computing Open Source Industry Alliance released the "2021 China DevOps Landscape Survey Report," analyzing DevOps adoption, tool and technology choices, transformation status, challenges, future investment trends, and enterprise policy/qualification needs based on a survey of 1,862 valid questionnaires from nearly 40 companies covering industries such as internet, telecom, finance, manufacturing, education, consulting, and retail.
The results show that more than 50% of Chinese enterprises have achieved a comprehensive or higher level of DevOps maturity, with the maturity level continuously expanding—growth rates exceeding 8% for two consecutive years. The DevOps maturity model includes five levels: Initial, Basic, Comprehensive, Excellent, and Outstanding.
Agile development has become mainstream; over 80% of enterprises practice agile to varying degrees, and more than 70% have established dedicated agile teams, focusing on continuous delivery of business value.
In security management, the DevSecOps concept is gaining traction, with 53% of enterprises attempting to implement DevSecOps—a near 12% increase from the previous year—indicating heightened security awareness.
The survey also details the diverse security tool landscape, highlighting the rise of IAST, threat modeling, security baseline configuration, NTA, threat intelligence, and SOC/SIEM tools. IAST emerges as the most prioritized technology under DevSecOps, with Xmirror’s LingMai IAST leading the market at a 5.84% usage share, supporting multiple languages (Java, PHP, Node.js, Python, .Net, Go) and full‑scene coverage.
Key considerations for IAST deployment include support for application instrumentation and traffic tracing, sensitive data leakage monitoring, automated installation via CI/CD pipelines, compatibility with modern micro‑service architectures, hot‑load configuration, performance anomaly handling, SCA for third‑party components, API coverage detection, and deep integration with DevOps platforms such as Jenkins, Jira, and CAS.
Copyright: All survey data and charts belong to the Cloud Computing Open Source Industry Alliance; any reproduction must credit the source.
DevOps Cloud Academy
Exploring industry DevOps practices and technical expertise.
How this landed with the community
Was this worth your time?
0 Comments
Thoughtful readers leave field notes, pushback, and hard-won operational detail here.