OpenAna named a Gartner Cool Vendor 2025

ResourcesPlaybooks

How Ana runsthe work, step by step.

Detailed playbooks for the recurring jobs teams hand to Ana - the trigger, the stack, every step, who approves what, and exactly what you get at the end.

Looking for customer-confirmed results? See the case studies.

Software6 steps

Upgrading a framework across dozens of services

A major framework or runtime version is going end-of-life and it touches every service. Ana plans the migration, upgrades each service in its own branch, fixes what breaks, and hands your team small, tested pull requests instead of one terrifying diff.

Read the playbook →
Software5 steps

Burning down a stale bug backlog

Every team has a backlog of real but low-priority bugs that never win a sprint. Ana triages them, reproduces the ones that are still real, fixes them with tests, and closes the rest with evidence.

Read the playbook →
Software5 steps

Extracting a service from a legacy monolith

A module inside the monolith needs to become its own service. Ana documents what the module really does, defines the contract, builds the service behind a strangler route, and proves parity before any traffic moves.

Read the playbook →
Security5 steps

Turning a pentest report into merged fixes

A penetration test lands as a PDF with dozens of findings. Ana parses it, confirms which findings are reachable in your code and cloud, writes the fixes with regression tests, and hands the auditor evidence for every closure.

Read the playbook →
Security5 steps

Clearing a dependency CVE backlog

Your SCA tool reports thousands of vulnerable dependencies and the number never goes down. Ana works out which are actually reachable, upgrades them safely with tests, and documents why the rest can wait.

Read the playbook →
Security5 steps

Fixing cloud misconfigurations at the source

Your CSPM tool flags public buckets, wide IAM policies and open security groups. Ana traces each one back to the infrastructure-as-code that created it, fixes it there, and stops it from coming back.

Read the playbook →
SRE / DevOps5 steps

From a 3 a.m. page to root cause and fix

An alert pages the on-call engineer. By the time they open the laptop, Ana has correlated metrics, logs, traces and recent deploys, named the likely cause, and drafted the remediation for approval.

Read the playbook →
SRE / DevOps5 steps

Reconciling infrastructure drift

Hot-fixes in the console and manual changes pile up until Terraform plans become scary. Ana finds every drifted resource, decides with you whether code or cloud is right, and brings them back in line.

Read the playbook →
SRE / DevOps5 steps

Rightsizing cloud spend without breaking SLOs

The cloud bill keeps climbing and nobody is sure which resources are safe to shrink. Ana finds idle and oversized resources, checks them against real utilization and SLOs, and ships the changes as reviewed IaC.

Read the playbook →
AI / ML5 steps

Catching model drift and retraining safely

A production model quietly gets worse as the world changes. Ana detects the drift, diagnoses which features and slices moved, retrains on fresh data, and promotes the new model only if it beats the old one through shadow and canary.

Read the playbook →
AI / ML5 steps

Taking a notebook model to production

A promising model lives in a data scientist’s notebook. Ana turns it into a reproducible pipeline, a tested serving endpoint and a monitored deployment - without rewriting the science.

Read the playbook →
Embedded5 steps

From DOORS requirements to verified firmware

A new feature arrives as a set of requirements. Ana designs the change, writes the firmware, runs it through unit, SIL and HIL tests, and keeps a trace from every requirement to the code and test that satisfy it.

Read the playbook →
Embedded5 steps

Patching a firmware CVE and shipping it over the air

A vulnerability lands in a component your devices ship. Ana finds every affected firmware build from the SBOM, patches and tests it, and stages an OTA rollout that stops itself if devices misbehave.

Read the playbook →
Private equity5 steps

Technology diligence before investment committee

A deal is heading to investment committee and the technology picture is a management deck. Ana reads the whole codebase, cloud and contract set in the data room and returns an evidence-linked view of risk and value-creation levers.

Read the playbook →
Private equity5 steps

Running a portfolio-wide vulnerability program

Operating partners need to know which portfolio companies carry real cyber risk and whether it is going down. Ana normalizes findings across companies, ranks them by real exposure, routes fixes to named owners and verifies closure.

Read the playbook →
Private equity5 steps

The first 100 days: a technology baseline

The deal has closed and the value-creation plan depends on technology. Ana builds a baseline of code, cloud, cost and delivery health in the first weeks, so the 100-day plan rests on evidence and progress can be measured.

Read the playbook →

Your workflow, not ours

Bring the job you dread.

Pick one playbook - or one we haven’t written yet - and watch Ana run it in your environment.

Book a demo
Browse use cases