WalmartLabs is releasing OneOps cloud technology to the world as open source

Oct 22, 2015 | Cloud, News

By Jeremy King, CTO of Walmart Global eCommerce, Head of @WalmartLabs, and Tim Kimmet, VP of Platform and Systems, @WalmartLabs

Developers and cloud users know the upside of operating in the cloud – flexibility, scalability, speed, etc.  Unfortunately, too many have discovered the biggest downside…being locked in to the cloud provider you start with.  At WalmartLabs, we built Walmart’s e-commerce operations on the cloud and decided to build technology that gave us all of the cloud’s upside without the downside. It’s called OneOps.

OneOps is powerful cloud technology we built ourselves that has transformed the way our engineers develop and launch new products to our customers. They deliver this with more speed and at a lower cost because OneOps helps them (1) avoid the pitfalls of being “locked-in” to a cloud provider, and (2) thrive in WalmartLabs’ “DevOps” culture – whatever code developers write, they own, from its development to its launch to customers.

And we know they love it – nearly 3,000 of our engineers are unique users of OneOps and, on average, our engineers commit over 30,000 changes per month to deliver new or improved features to our customers. Now, that’s agility!

Today, WalmartLabs is announcing OneOps will be released to the world as open source. We will have the source code uploaded to GitHub by the end of the year.

This is good news for developers who need technology that can continuously manage and monitor the applications they develop when it’s deployed in the cloud. It’s great news for companies who have considered switching cloud providers but experience the “Hotel California Effect,” where they can “check out but never leave” their cloud provider because they’re locked into the provider’s proprietary APIs, architecture and tools.

Walmart Labs

OneOps has four main benefits:

1) Cloud portability enables developers to seamlessly move applications, databases or entire cloud environments from one cloud provider to another. They’re able to “cloud shop” and take advantage of better technology or lower costs;

2) Continuous lifecycle management of the application means once a developer launches an application, OneOps continuously “auto-pilots” the app, scaling and repairing the app when unforeseen changes occur;

3) Faster innovation empowers engineers to spin up a new environment to host their app in a matter of minutes, without having to spend hours specifying the intricacies of a specific cloud environment. OneOps models all of that for them; and

4) Greater abstraction of cloud environments puts the control back into the hands of developers, instead of cloud providers, who often dictate the proprietary APIs, architecture, tools and technologies developers have to use.

We’re enabling any organization to achieve the same cloud portability and developer benefits that Walmart has enjoyed. And by eliminating the barriers that cloud hosting providers have erected, OneOps will drive them to compete based on price, customer service and innovation. It’s a winning scenario for all dev-centric organizations.

We wanted to take advantage of the cloud’s benefits as users, but we didn’t want to be locked-in legacy users. Open sourcing OneOps to the community will only make this technology better. OneOps negated the “Hotel California Effect” for WalmartLabs – we’re no longer a “prisoner of our own device.” And soon, neither will other denizens of the cloud.

 

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more