Lee Siang Fong

Blog › AI

AI in DevOps: How to Use It Without Breaking Things

Where AI genuinely helps in DevOps, what the 2025 DORA research found about speed and stability, and the guardrails to put in place before you rely on it.

AI in DevOps means using AI tools to help write code, test it, review it, release it and run it. It can make teams faster, but research shows it also tends to make releases less stable unless good testing and controls are already in place. The rule of thumb: fix your foundations first, then add AI.

DevOps itself is the practice of developers and operations staff working together to ship software often and reliably, usually with a lot of automation.

What the research says

The best evidence comes from DORA, Google Cloud's long-running research programme on software delivery. Its 2025 report, State of AI-assisted Software Development, drew on survey responses from nearly 5,000 technology professionals.

Key findings, from Google Cloud's summary:

  • 90% of respondents use AI at work.
  • More than 80% believe it has made them more productive.
  • 30% have little or no trust in AI-generated code.
  • AI adoption now links to higher delivery throughput (shipping more, faster).
  • But it still links to lower delivery stability, meaning more failed changes and rework.

The report's headline is worth remembering: AI doesn't fix a team; it amplifies what's already there. Strong teams get better. Teams with weak testing and messy processes see those problems grow.

Why? More code, written faster, means more changes going out. Without strong automated tests and quick feedback, more changes means more breakages.

Where AI helps in DevOps

Here are practical places AI earns its keep, roughly from lowest to highest risk.

Writing and explaining code

Coding assistants suggest code, write boilerplate and explain unfamiliar code. Useful for speed, but every suggestion still needs review, as you would for a new hire.

Tests

AI is good at drafting unit tests and spotting edge cases a person forgot. Tests are a safe place to start, because a bad test is caught quickly and doesn't reach customers directly.

Code review help

AI can flag likely bugs, security issues or missing error handling in a pull request (a proposed code change). Treat it as a second pair of eyes, not the approver.

Pipeline troubleshooting

When a build fails, AI can read long logs and point to the likely cause. This saves real time on a frustrating task.

Incident response

During an outage, AI can summarise alerts, search logs and suggest where to look. It works best when you already collect good logs, metrics and traces. See observability vs monitoring.

Infrastructure changes

AI can draft infrastructure-as-code (config files that describe your servers and cloud setup). This is higher risk: one wrong line can open a database to the internet or delete resources. Review carefully.

Guardrails before you rely on AI

Because the DORA research links AI to lower stability, the guardrails matter more than the tools.

  1. Strong automated testing. Nothing goes to production without passing tests. The report itself points to automated testing, mature version control and fast feedback loops as the controls that matter.
  2. Small changes. Ship small batches so problems are easy to find and roll back.
  3. Human approval for risky actions. AI can suggest a production change or a database migration. A person approves it.
  4. Limited permissions. AI tools and agents get the least access they need. No standing admin rights to production.
  5. Fast rollback. Make undoing a bad release quick and routine.
  6. Keep secrets and personal data out of prompts. Check where your AI tool sends code and logs. If logs contain customer data, Malaysia's PDPA still applies.
  7. Measure. Track delivery speed and stability, such as how often changes fail and how fast you recover. The DORA metrics are a good standard set.

A sensible rollout

For a team at a bank, a logistics company or a growing SaaS start-up, a cautious path looks like this:

  1. Baseline your current delivery speed and failure rate.
  2. Start with low-risk uses: tests, log summaries, documentation.
  3. Add coding assistants with clear review rules.
  4. Compare after a few months. Did you ship faster without more failures?
  5. Expand to higher-risk areas, like infrastructure, only once the guardrails are proven.

If you are planning wider AI adoption beyond engineering, our enterprise AI roadmap covers strategy and governance, and AI and cybersecurity covers the security side.

The bottom line

AI in DevOps is useful, and most developers already use it. But the evidence says it speeds up whatever you already are. Invest in testing, small releases and good monitoring first, keep humans in charge of risky changes, and measure stability as closely as speed.

Quick answers

Does AI make DevOps teams faster?

The 2025 DORA research links AI adoption to higher throughput. It also links it to lower stability, so speed gains can be lost to more failures if controls are weak.

Can AI replace DevOps engineers?

No. AI helps with drafting, testing and analysis, but people still need to design systems, approve risky changes and own outcomes.

What is the safest place to start with AI in DevOps?

Writing tests, summarising logs and drafting documentation. Mistakes there are cheap and easy to catch.

Should AI tools have access to production?

Only with tight limits. Give read access where useful, and require human approval for any change to live systems.

Sources

Read next