Why enterprise software development in Australia needs air traffic control

GitLab

By Craig Nielsen, Vice President, Asia Pacific & Japan, GitLab
Thursday, 05 March, 2026


Why enterprise software development in Australia needs air traffic control

Imagine being a CIO right now. Your developers are eager to experiment with the latest AI coding assistants, each one promising faster builds and cleaner code. New models and tools appear almost weekly. The pressure to move quickly in this rapidly changing landscape is real, but so is the responsibility to protect data, meet regulatory obligations and maintain control over how software is built.

Two paths are emerging. Startups and small teams are optimising for speed, adopting whatever tools help them ship faster. Larger organisations, by contrast, must account for data sovereignty, privacy and compliance, which are not optional in the Australian market. These constraints shape every technology decision, especially as AI becomes embedded in development workflows.

This tension is already evident in Australian organisations. According to GitLab research, 37% of DevSecOps professionals in Australia use AI tools at work that their organisation hasn’t formally adopted. While this highlights a natural desire for the best tools available, it also signals a growing gap between how software is built and what enterprises can safely govern.

The challenge is that AI is evolving too quickly for a stop-start approach. You cannot rebuild your entire toolchain every few months, yet standing still is not an option either. Competitors who find a way to move fast without losing control will pull ahead.

Tool fragmentation is the real bottleneck

The bottleneck isn’t a lack of AI capabilities. There are too many tools and not enough control.

Recent data described above shows that 67% of development teams in Australia use more than five different tools for software development, and 63% use more than five AI tools. The cost of this fragmentation is staggering. DevSecOps professionals lose seven hours per week to inefficiencies, nearly a full workday spent managing disconnected workflows and context-switching between platforms.

You might think the solution is to restrict tool adoption or mandate a single approved stack. But in reality, that approach fails. Developers will continue using the tools they want. Shadow IT has evolved into shadow AI, and the question is how to manage it. Who or what plays air traffic control?

The enterprise reality of vibe coding

Today, anyone can prompt their way to functional code, using natural language to translate business requirements into working applications. This accessibility represents real progress, but 78% of organisations in Australia have already experienced significant problems with the ‘vibe coding’ approach.

The non-deterministic nature of LLMs means the same prompt can generate different outputs, creating validation challenges that didn’t exist with traditional development tools. AI can optimise the solution it’s given, but only humans can step back and assess whether we are solving the right problem the right way.

Enterprise development operates with pre-existing codebases spanning millions of lines, non-negotiable compliance requirements, legacy system integrations and complex security protocols. These constraints can make AI less effective. What appears to be a minor change in one line of code can ripple through interconnected systems in ways that even experienced developers struggle to predict without comprehensive context.

AI helps developers write exponentially more code, which means more reviews, more tests to run, more surface area to protect — and more technical debt to manage. We call this the scale trap. AI accelerates one part of the development lifecycle while creating bottlenecks everywhere else. And as code complexity compounds, the very speed, agility and accuracy that made AI attractive in the first place begin to erode, creating a vicious cycle where teams move faster only to slow down.

The platform as air traffic control

The governance crisis is real and accelerating. In Australia, 79% of organisations report that AI is making compliance management more challenging, not easier. Individual tools lack the visibility and control needed to enforce consistent standards across the entire software development lifecycle.

Point solutions, no matter how sophisticated, can’t address the interconnected requirements of AI orchestration, governance and compliance. A platform that functions as an air traffic controller is key because it ensures every vehicle follows the rules while still allowing drivers to choose their preferred route.

Here’s how a platform orchestration approach works in practice:

  • Single point of control: Every piece of code, regardless of which AI tool generated it, flows through a unified platform that applies your organisation’s rules and regulations consistently.
  • Comprehensive context: The platform provides AI agents with project plans, test suites, compliance checks, security scans and the complete picture across your SDLC. With this context, agents can understand dependencies and implications to operate effectively.
  • Validated outputs at scale: Non-deterministic AI outputs require consistent quality checks. A platform approach systematically implements these validation loops, catching issues before they compound into production problems.
  • Data privacy by design: The platform addresses enterprise-level data sovereignty requirements so your code and intellectual property remain under your control, not training models for someone else.
  • Provider-agnostic developer freedom (within guardrails): Developers can use their preferred tools and experiment with emerging technologies, while the platform ensures everything meets enterprise standards.

Orchestration is the new control plane

Australian organisations are building software in an environment of constant change. AI tools are evolving rapidly. Those who start investing in orchestration infrastructure today create a competitive advantage that compounds over time, enabling them to adopt emerging capabilities quickly while others struggle to retrofit governance into fragmented toolchains.

Developers are free to innovate with the tools they prefer, experiment with new solutions, and choose the most effective approaches. Meanwhile, organisations can be assured that the platform enforces security standards, meets compliance obligations, and maintains consistent code quality regardless of source.

In the AI landscape, someone has to play the role of air traffic control. The key consideration is whether that control is built into a platform that enables innovation or imposed through restrictions that push activity into shadow IT.

Organisations that move quickly without compromising stability, support developer creativity within clear guardrails, and adopt platform orchestration as their foundation for lasting innovation will emerge as the clear leaders. Establishing a strong platform engineering approach today will shape the next generation of software development.

Image credit: iStock.com/tadamichi

Related Articles

Closing the reliability gap: the AI practices Australian organisations need now

Australian businesses need practices that will put them on the path to optimal AI implementations...

The agentic AI shifts of 2026: Orchestration, governance and scale

2026 is set to become the year where we move beyond the pilot era and focus on orchestration,...

Private AI: from sovereignty obligation to business advantage

Private AI makes innovation sustainable in environments where regulatory scrutiny, customer...


  • All content Copyright © 2026 Westwick-Farrow Pty Ltd