Claude Opus 4.8 is now available in GitLab Duo Agent Platform for complex, multi-step coding and agentic workflows. The model is designed to follow instructions more precisely over extended autonomous runs, reducing the need for human correction and intervention. It also supports mid-conversation system-prompt updates without invalidating the prompt cache, making it better suited to changing contexts.
## Improved Long-Horizon Agentic Execution
- Handles complex workflows involving multiple tools and extended sequences.
- Provides more comprehensive planning and reasoning.
- Produces more accurate end states with fewer interruptions or redirects.
- Interprets instructions more precisely than previous models.
- Supports professional tasks beyond coding, including:
- Document drafting
- Data analysis
- Structured knowledge work
## Mid-Conversation System Prompts
- System instructions can change during an active session.
- Prompt-cache validity is preserved when context changes.
- This is useful when:
- Files change on disk
- Token budgets shift
- User context is updated
- Asynchronous information arrives
## Availability and Pricing
- Available through model selection in Agentic Chat and across GitLab Duo agent workflows.
- Runs on GitLab Credits.
- GitLab Premium and Ultimate subscribers can use included credits.
- New users can access it through a GitLab Duo Agent Platform trial or the GitLab Free tier.
Teams seeking more reliable autonomous coding and documentation workflows can use Opus 4.8 in GitLab Duo to reduce manual oversight while agents complete longer, more complex tasks.
Cloudflare is adding Claude Compliance API support to CASB, giving security teams visibility into Claude usage without endpoint agents or inline traffic inspection. The integration scans Claude organizations, projects, conversations, files, and artifacts for sharing issues and sensitive data, then surfaces findings in the Cloudflare dashboard. It also connects those findings to Cloudflare Gateway policies so teams can move from detection to enforcement.
## The Security Challenge of Enterprise AI
- AI adoption has outpaced governance, leaving organizations with limited visibility into sanctioned tools.
- Traditional controls may block unauthorized applications but cannot inspect activity inside approved AI platforms.
- AI-specific risks include:
- Employees entering customer or confidential data into prompts
- Developers exposing API keys
- AI-generated content containing company secrets
- Files and data being shared through persistent conversations and agent workflows
- Effective protection must cover the full lifecycle of AI data, including API usage, content handling, and data stored within applications.
## Cloudflare’s Layered AI Security Model
- **Cloudflare AI Gateway** monitors requests, token usage, and model performance while supporting rate limits, caching, and routing controls.
- **Cloudflare Gateway and Data Loss Prevention** inspect AI traffic and can block prompts containing personally identifiable information or confidential material.
- **Cloudflare Access with MCP server portals** protects connections between agents and corporate systems, with centralized access control and audit logging.
- **Cloudflare CASB** scans data stored inside Claude for misconfigurations and sensitive content through API integrations.
## Claude Compliance API Findings
Cloudflare CASB connects to Anthropic’s Compliance API and displays findings alongside those from applications such as Microsoft 365, Google Workspace, and Salesforce.
- **Projects:** Detect projects shared with an organization or selected users and groups.
- **Project attachments:** Identify files and documents violating DLP policies.
- **Chat files:** Scan user-uploaded and provider-generated files.
- **Chat messages:** Inspect prompts and provider responses for sensitive data.
- **Artifacts:** Detect sensitive information in AI-generated documents and files.
- Findings are categorized, prioritized by severity, and handled through existing triage, assignment, and remediation workflows.
## Coverage for Claude Enterprise and Platform
- For **Claude Enterprise**, CASB retrieves information about organizations, projects, chats, roles, messages, and uploaded files using read-only endpoints.
- For **Claude Platform**, it continues to monitor member and workspace changes, API key creation, and file creation or download events.
- Support for the Claude Platform Activity Feed is planned for a future release.
## From Detection to Enforcement
- A finding such as a sensitive file upload can be converted into a Cloudflare Gateway policy.
- Administrators can:
- Block uploads to Claude for specific users
- Restrict access to Claude entirely
- Limit application functionality until the issue is resolved
- This combines CASB’s visibility into stored data with Cloudflare’s inline policy enforcement.
## Getting Started
- Organizations need a Claude Enterprise account.
- They must request Compliance API access from Anthropic.
- Once access is granted, the integration can be connected through Cloudflare CASB.
Cloudflare’s recommendation is to combine CASB monitoring with Gateway, DLP, AI Gateway, and Access controls to govern AI usage across both traffic and stored data.
GitLab is expanding its integration with Anthropic Claude to provide enterprise teams with more capable AI inside a governed software development platform. Claude supports GitLab Duo Agent Platform features such as code generation, review, agentic chat, and vulnerability resolution. The central argument is that organizations should not have to trade advanced AI capabilities for security, compliance, and auditability.
## Governed AI across the SDLC
- Claude-generated changes follow GitLab’s existing merge request process, approval rules, security scans, and audit trails.
- AI agents do not bypass controls; their actions remain attributable, reviewable, and subject to policy enforcement.
- This governance becomes increasingly important as agents autonomously plan, code, test, secure, and deploy software.
- GitLab positions built-in governance as a core architectural differentiator rather than an added feature.
## Flexible enterprise deployment
- Claude is available in GitLab through:
- Google Cloud Vertex AI
- Amazon Bedrock
- Organizations can use existing cloud contracts, governance frameworks, and data-residency arrangements.
- GitLab’s availability in the Claude Marketplace lets customers purchase GitLab Credits and apply them toward Anthropic spending commitments.
- These options simplify procurement and consolidate AI spending.
## Supporting an agentic development model
- GitLab is selecting model partners based on reasoning ability, reliability, and safety.
- The platform is designed to maintain visibility into what AI agents do, when they act, and how their changes are tracked.
- As agents take on more complex engineering tasks, GitLab argues that strong models must be paired with equally strong governance.
## Implications for customers
- Existing GitLab Duo users gain deeper Claude-powered assistance without changing their established governance processes.
- Organizations evaluating AI development platforms can access advanced models while retaining enterprise control.
- GitLab presents the integration as a way to accelerate development without compromising compliance or oversight.
The practical recommendation is to evaluate AI platforms not only by model capability, but also by how well they integrate governance, auditability, cloud deployment options, and existing enterprise workflows.
Figma announced that Mike Krieger, Anthropic’s Chief Product Officer and Instagram co-founder, and Luis von Ahn, Duolingo’s co-founder and CEO, have joined its Board of Directors. Both bring experience scaling widely used products and championing strong design, product quality, and innovation. Figma expects their perspectives to support its evolution into an AI-powered platform for collaborative product development.
## Mike Krieger’s Product and Infrastructure Experience
- Krieger oversees product engineering, management, and design at Anthropic.
- As Instagram’s co-founder and CTO, he scaled its infrastructure from a few million users to more than 1 billion monthly active users.
- He later co-founded Artifact, a personalized news app acquired by Yahoo.
- Figma CEO Dylan Field praised Krieger’s combination of broad product vision and meticulous execution.
- Krieger was also an early angel investor in Figma.
## Luis von Ahn’s Design and Growth Expertise
- Von Ahn co-founded Duolingo in 2011 and has led its growth to more than 100 million monthly active users.
- Duolingo provides language education in over 40 languages and is known for its approachable, engaging design.
- Before Duolingo, von Ahn co-created CAPTCHA and reCAPTCHA, including a crowdsourced approach to internet security.
- Field highlighted von Ahn’s close collaboration with Duolingo’s design team and his advocacy for design despite his computer science background.
## Figma’s Expanding Board
- Krieger and von Ahn join existing directors including Dylan Field, Mamoon Hamid, Kelly Kramer, John Lilly, Bill McDermott, Andrew Reed, Danny Rimer, and Lynn Vojvodich Radakovich.
- The appointments add expertise in AI, consumer products, education, infrastructure, enterprise software, and design-led growth.
- Figma describes itself as an AI-powered platform supporting the full process from ideation and design through development and shipping.
Figma’s board additions reinforce its focus on product craft, design, AI, and large-scale user growth as it expands beyond design tooling into a broader product-development platform.
