Runtime Security Moves Into Observability Workflows

Miggo Security and Grafana Labs have introduced a joint offering that embeds runtime security into existing observability workflows. The integration allows Grafana Cloud users to use production telemetry to assess exposure, monitor application behavior, and identify which vulnerabilities present real risk. The approach avoids additional agents by building directly on tracing and profiling data already in use.

The announcement reflects a broader issue in security operations. Teams continue to manage large volumes of vulnerabilities, many of which are not exploitable in real-world conditions. At the same time, gaps in runtime visibility make it difficult to prioritize effectively. Traditional runtime security tools often require separate data collection, increasing infrastructure overhead and creating disconnects between engineering and security teams.

The combined solution uses distributed tracing and continuous profiling to establish a runtime baseline of applications. It tracks execution paths, evaluates exploitability, and validates exposure based on actual behavior in production. This enables teams to move beyond theoretical risk scoring and focus on vulnerabilities that can be reached and executed. It also supports mitigation actions such as virtual patching to reduce risk while remediation is underway.

For security leaders, the shift centers on using existing telemetry to drive decision-making. Reducing vulnerability noise, improving prioritization, and aligning security with development workflows all become more achievable when runtime context is built into observability data. As organizations expand cloud-native and AI-driven architectures, this model points to a more integrated approach to managing runtime risk.