When teams move from deciding on their migration strategy to mobilizing to act, agentic AI can be used to enforce secure-by-design practices and policies. Welcome back to the second in our two part series on using agentic AI for DevSecOps to drive secure-by-design architecture. (If you missed part one, check out our previous post The Speed of Relevance: Laying the Foundation for Strong DevSecOps Practices)

Infrastructure as Code Delivers Automated Compliance Enforcement

Secure-by-design principles are enabled through both infrastructure as code and robust security testing practices. First, deployments via infrastructure-as-code (IaC) produce consistent, repeatable, and hardened environments, reducing misconfigurations. This addresses a common security weakness. Additionally, these pipelines generate detailed logs and audit trails.

Furthermore, pipelines can embed policy-as-code and compliance-as-code frameworks, continuously validating that builds align with standards like NIST, CMMC, STIG, RMF, or agency-specific security baselines. They can also build custom workflows and templates that ensure their DevSecOps agents work consistently following their internal guidelines and processes.

There are many examples of how teams can use preconfigured DevSecOps templates and workflows to enhance their security:

• Pipeline templates that enforce secure configurations by default (e.g., encryption turned on, least privilege IAM roles, logging enabled) across every environment.
• Workflows that eliminate hardcoded credentials by integrating with vaults and key management services, ensuring sensitive data is injected securely at runtime.
• Automated pipelines that support rolling updates and security patching, making it easier to quickly remediate vulnerabilities without manual intervention.

Automated Security Testing Provides Guardrails

The other component is security testing. Using ReDuX AI agents in combination with other automation tools, DevSecOps teams use security testing (static code analysis, dependency scanning, secret detection) early in the pipeline, ensuring vulnerabilities are caught before deployment.

Moreover, for every task performed by any ReDuX agent, output can be verified and corrected by a human team member. The self-learning agents improve their process, further improving efficiency gains. And because in enterprise implementations of ReDuX agents share skill improvements across the digital workforce, all agents improve when one agent improves. This process further enhances security beyond what is available with simply co-pilot tools or AI agents used for a single step of the process.

Ultimately, by both using OODA loops as described in our first post and automated compliance, teams can use AI for end enforcement of DevSecOps best practices. In addition to this, one of the most important ways DevSecOps supports security best practices is it fosters a culture of continuous improvement and collaboration, particularly between developers, security, and operations. At its core, DevSecOps best practices shift important security decisions to the left, moving them earlier in the process so that the tools use by modernization teams have the greatest impact at reducing risk.
If you want to see how your team can accelerate decision making and modernize with secure-by-design architecture, schedule a live demonstration with our team. And if you are headed to the AFCEA Belvoir Industry Days May 5-7, 2026, Let’s talk!

Last year our team examined agentic DevSecOps for secure-by-design architecture on our ReDuX blog. In this two part series, experts in our Defense portfolio are returning to their call to shift security decision making left. With renewed attention to the needs of the warfighter and the mission we address these new challenges and opportunities.

For agencies operating in an IL4 or IL5 environment integrating security into their modernization is an essential requirement of the mission. Modern environments must adhere to strict security standards, meet data sovereignty requirements, and enforce secure CI/CD pipelines all while operating within GovCloud.

In short, to effectively optimize DevOps outputs using AI, agencies must partner with organizations that have proven experience working with their highly-regulated environments. Moreover, when the modernized systems are well-architected, they directly operationalize secure-by-design principles. To achieve this state we use our ReDuX platform to observe to understand the legacy system, make informed decisions early and when relevant while building incrementally to adapt to changing mandates.

Shift-Left Security and the Speed of Relevance

In our original post, we noted, the earlier teams identify problems and security risks, the earlier they adapt and develop solutions. We call this Shift-Left Security and it greatly improves the speed of relevance for making critical architecture decisions that improve the overall security of the system.

Shift-Left Security is based on our integration of the Observe-Orient-Decide-Act (OODA) loop into our GoLean development methodology. With GoLean we observe process improvement opportunities earlier. After orienting to a new approach, we then decide on process improvements and act to implement it within our work. As a result of using this data-driven OODA loop process for over a decade our development methodology has been repeatedly appraised at CMMI Level 5. 

When incorporated into our ReDuX process we use OODA loops to not only continuously improve process but also to reduce risk. We do this by building a comprehensive blueprint of the legacy system so we can observe risks. Next we orient to plan our migration roadmap, then decide to mobilize agents and teams to complete our work and finally, act to incrementally modernize while reducing rework.

Reducing Risk with Legacy System Blueprinting

Using agentic AI in our ReDuX platform, blueprinting agents map the structure of legacy systems and identifies its relationship to external components. Our teams can then match legacy code to screen flows and end-points so that teams identify orphan or dead code before they begin migration planning.

Thus, using agentic-driven blueprinting we greatly accelerate the speed of relevance for making critical security decisions. We move the decisions about how to improve, optimize and reimagine the system earlier in the discovery phase which allows us to act and adapt sooner to emerging risks.

If you want to learn how we use system blueprinting to accelerate decisionmaking and build secure systems, schedule a live demo with our team. If you are headed to the AFCEA Belvoir Industry Days May 5-7, 2026, Let’s talk!

And stay tuned! In our next blog we will share how we use AI agents to build secure architecture as part of our DevSecOps practice.

HERNDON, VA — Karsun Solutions, a leading provider of enterprise modernization software and solutions, announced it was named to the Northern Virginia Technology Council (NVTC) AI50 list. AI50 Companies are outstanding organizations whose artificial intelligence (AI) use creates customer value, transforms operations, and advances the Washington region’s AI leadership.

Karsun’s ReDuX Platform Drives Growth

Karsun has over 15 years of experience providing information technology services to the U.S. federal government. In 2025 it expanded its offerings to include new AI solutions while launching its ReDuX® AI-powered platform in the commercial market. Since its launch Karsun received repeated recognition for its ReDuX® platform including identification in the recently released 2026 Information Services Group (ISG) Provider Lens® Mainframes  — Services and Solutions report for Application Modernization Software. 

The ReDuX® platform uses agentic AI to accelerate key modernization tasks from discovery to delivery.  ReDuX® uses AI agents to automate critical modernization tasks including blueprinting legacy systems, business logic and requirements extraction, code conversion and test automation, and the creation of custom digital workforces for common tasks.

Karsun recently released a pair of mainframe modernization case studies demonstrating the platform’s capabilities. These highlight the platform’s traceability and explainability features and show how teams use ReDuX® to reimagine document workflows. Learn how it works at GoReDuX.ai/how-it-works.

Karsun’s Technology Leadership in the D.C. Region

Karsun has previously received recognition on the NVTC’s Tech 100 ranking of the 100 leading companies in the Northern Virginia region located in the Washington, D.C. metro area. Its commitment to integrating emerging technologies into its software and solutions is led by the Karsun Innovation Center. This in-house research and development unit is responsible for developing the ReDuX® platform

The 2026 AI honorees will be celebrated at the NVTC’s Impact AI Summit on May 14, 2026. The recognition solidifies Karsun’s position as an emerging leader in the AI software and solutions market in one of the nation’s most dynamic technology ecosystems. Register to join Karsun and the other honorees at https://nvtc.glueup.com/event/impact-ai-summit-166407/.

About Karsun Solutions

Karsun Solutions modernizes legacy systems enabling government agencies and enterprise organizations to elevate mission capability. IT solutions from Karsun are tailored to meet mission-driven organizations’ unique needs and optimize operations. These solutions adapt and stay relevant to current trends while using secure, digital architecture built to last. It is a proven modernization partner whose expertise ensures every next opportunity is within reach. Learn more at Karsun-LLC.com.

About ReDuX

The ReDuX AI-powered platform expedites the modernization of mainframe and other legacy system applications. Key tools in the platform include its blueprinting agents, which provide deep insights into system structure and behavior, and its modernization agents, which use the outputs from the blueprinting agents to generate code and facilitate incremental migration. These agents also bring enhanced security and privacy, offering project-specific usability by interfacing with various systems, overcome hallucinations noted in large language models (LLMs), and provide proven prompt templates to save developers time and effort. Get started at GoReDuX.ai.

Karsun Solutions Contact

marketing@karsun-llc.com

HERNDON, VA — Karsun Solutions, the enterprise modernization experts, today announced its recognition in the 2026 Information Services Group (ISG) Provider Lens® Mainframes Services and Solutions report. The firm was identified as a Contender in the U.S. Public Sector Application Modernization Services quadrant and a Product Challenger in the Global Mainframe Application Modernization Software quadrant.

As public sector agencies face the dual challenges of an aging workforce and the expiration of stimulus funding, Karsun has established itself as a strategic partner capable of bridging high-end federal engineering to state and local government engagement. ISG’s research highlights Karsun’s deep domain expertise in modernizing mission-critical, complex government systems that require strict compliance and end-to-end traceability.

ReDuX: The Capability Driver for AI-Native Modernization 

Central to Karsun’s recognition is ReDuX®, its AI-native modernization platform. ReDuX leverages agentic, multimodal AI to automate critical modernization tasks, including:

• Blueprinting and Requirements Extraction: Documenting black box legacy systems to understand complex, undocumented applications.
• Code Conversion and Test Automation: Accelerating throughput while reducing the risks associated with manual refactoring.
• Human-in-the-Loop Governance: Ensuring auditability and verification, which is essential for regulated public sector environments.

Using ReDuX Karsun claims teams deliver four times faster with two times less rework. It recently released a pair of mainframe modernization case studies. These demonstrated ReDuX’s traceability and explainability features and a modernization engagement that reimagined document workflows for a legacy certification system. Karsun shares how ReDuX works at GoReDuX.ai/how-it-works.

Delivery Discipline Plus Public Sector Expertise

Karsun’s public sector expertise is boosted by its delivery discipline. Its work is underpinned by its CMMI Level 5 appraisal and commitment to quality, enabling predictable, measurable outcomes across complex legacy landscapes. This high level of compliance allows Karsun to provide enterprise-grade security to state and local agencies, meeting the same rigorous standards required of federal agencies.

Karsun brings this validated public sector experience to rigorous execution of modernization initiatives for commercial enterprises. Backed by the Karsun Innovation Center, its experts deliver modern software development, cloud, data and AI solutions. Learn more about Karsun’s professional services at karsun-llc.com/solutions/.

About Karsun Solutions

Karsun Solutions modernizes legacy systems enabling government agencies and enterprise organizations to elevate mission capability. IT solutions from Karsun are tailored to meet mission-driven organizations’ unique needs and optimize operations. These solutions adapt and stay relevant to current trends while using secure, digital architecture built to last. It is a proven modernization partner whose expertise ensures every next opportunity is within reach. Learn more at Karsun-LLC.com.

About ReDuX

The ReDuX AI-powered platform expedites the modernization of mainframe and other legacy system applications. Key tools in the platform include its blueprinting agents, which provide deep insights into system structure and behavior, and its transformation agents, which use the outputs from the blueprinting agents to generate code and facilitate incremental migration. These agents also bring enhanced security and privacy, offering project-specific usability by interfacing with various systems, overcome hallucinations noted in large language models (LLMs), and provide proven prompt templates to save developers time and effort. Get started at GoReDuX.ai.

Karsun Solutions Media Contact

marketing@karsun-llc.com

About ISG Provider Lens® 2026 Mainframe Services and Solutions Study

The ISG Provider Lens® 2026 Mainframes Services and Solutions study analyzes the relevant software vendors/service providers in the U.S. PS, Global markets, based on a multi-phased research and analysis process, and positions these providers based on the ISG Research methodology. Learn more at

Joe Gebbia, the nation’s first-ever chief design officer, is planning to reshape federal government websites. Calling for delightful websites, the new America by Design initiative calls on agencies to modernize the interfaces that serve everyday citizens. Signaling a new era for government websites, agentic AI may provide the key to unlocking the rapid transformation required to meet this challenge.

The Foundation: A Brief History of USWDS

The cornerstone of this transformation is the U.S. Web Design System (USWDS). Launched in 2015, USWDS was created to provide a shared set of design tools and user interface (UI) components for federal agencies. According to the USWDS history, the project was born from the need to reduce design debt and create a consistent appearance across federal websites. Beginning with a small library of buttons and forms, USWDS eventually evolved into a robust ecosystem used by hundreds of federal projects to ensure accessibility, mobile-friendliness, and trust.

The Product Mindset: Meeting User Expectations

Modernizing federal applications is about more than meeting a set of requirements. Service delivery experts know delivering a delightful user experience requires a fundamental shift in strategy. At Karsun, we advocate for a Product Mindset.

Users expect a seamless experience. Government applications should work across devices. They should meet evolving expectations such as the integration of chatbots. A Product Mindset asks delivery teams to consider not only users’ needs today, but also their future needs. It builds in feedback loops to continuously track and ensure expectations are met. Its modernization and digital transformation that delivers applications designed for every next, ensuring they remain resilient and adaptable using not only design best practices but secure, modular, digital architecture.

ReDuX: The Bridge to the Future

Bridging the gap between legacy systems and delightful, yet compliant, interfaces is a monumental task. This is where the ReDuX platform provides a revolutionary AI-powered solution.

ReDuX uses agentic AI to ensure modernization efforts align perfectly with user intent. By taking user demos as an input, ReDuX analyzes real-life behavior to craft functional requirements that reflect how people actually use a service.

Today, ReDuX incorporates the USWDS among its input during code generation. This ensures that every line of code produced adheres to federal design standards by default. Furthermore, because ReDuX can ingest any reference material provided, it is future-proof. When USWDS evolves to the next era of web standards, ReDuX can meet the challenge, optimizing applications to new standards as they emerge.

The path to better service delivery doesn’t have to be slow. With the power of agentic AI and a Product Mindset approach, federal agencies can transform applications faster than ever before.We invite you to learn how ReDuX can help your agency deliver delightful websites that honor the mission and respect the user. Let’s build the future of federal digital services, together.

For the last decade, microservice architecture has been king. Breaking down massive, monolithic applications into small, independently deployable services revolutionized how we build and scale software.

But what’s the next step?

We’re on the verge of the next major evolution, one that infuses our systems with intelligence. We’re moving from a world of reactive microservices to one of proactive micro-agents.

This isn’t just a change in buzzwords. It’s a fundamental shift from building systems that wait for commands to building systems that understand goals.

The Now: The Reactive Microservice

First, let’s look at the microservice as we know it.

A microservice is like a specialist at a desk with a phone. It’s an expert at one specific task such as checking inventory, processing a payment, sending an email. It’s highly efficient, but it’s also dumb. It does absolutely nothing until someone calls its API and gives it a very specific, rigid command.

• It’s Reactive: It waits for a request.
• It’s Task-Oriented: It executes a single, well-defined job.
• It’s Unaware: It has no concept of the “bigger picture” or the user’s ultimate goal.

All the smart logic for coordinating these services lives elsewhere, often in a central “Orchestrator” service or hard-coded into the application’s front-end. If the payment service fails, the orchestrator must have pre-written, rigid logic to handle that specific error.

The Next: The Proactive Micro-Agent

Now, imagine that same specialist, but instead of just giving them a command, you give them a goal.

This is the micro-agent. It’s an intelligent, autonomous entity that has an objective and the power to decide how to achieve it.

• It’s Proactive: You give it a goal (e.g., “Get this order shipped”), and it decides the steps.
• It’s Goal-Oriented: It understands the “why” behind a request, not just the “what.”
• It’s Context-Aware: It can plan, execute, and even handle errors dynamically.

If the payment agent fails, the checkout agent doesn’t need to follow a rigid script. It can reason about the problem. It might decide to try an alternative payment method, or it might call the notification agent to ask the customer for a new card, all without human intervention.

The Secret Sauce: AI as the Reasoning Engine

What makes this shift possible? Artificial Intelligence (AI) and Large Language Models (LLMs).

An LLM acts as the brain or the reasoning engine for the agent. It’s what gives the agent the power to understand a complex goal, break it down into steps, and orchestrate the tools needed to get it done.

In this new model, your old microservices don’t disappear. They become the “tools” in the agent’s toolbox.

• The PaymentService (a microservice) is just a tool.
• The PaymentAgent (a micro-agent) is the intelligent “brain” that knows when and how to use that tool.

A Tale of Two Checkouts

Let’s look at a simple e-commerce example to see the difference in action.

The Future is Autonomous

Microservices were about decentralizing tasks. This was a huge step forward.

Micro-agents are about decentralizing decisions.

This is the logical and necessary next step for building systems that are not just scalable, but truly intelligent, resilient, and autonomous. The specialists in our architecture are finally getting the promotion they deserve. They transition from order-takers to problem-solvers.

This blog is part of our ongoing series spotlighting our enterprise modernization experts. This edition’s featured author is Hari Narayanan, a Solution Advisor and Architect in the Karsun Innovation Center. Connect with him on LinkedIn.

Join Karsun Solutions on LinkedIn for more from our Enterprise Modernization Experts. To start building with your own autonomous agents check out GoReDuX.ai. For more on our approach to modern software development check out our solutions https://karsun-llc.com/solutions/.

A contractor supporting a critical mainframe modernization project for a state government agency, faced a significant challenge. Tasked with migrating a legacy COBOL system, the contractor’s initial pilot migration attempt using AWS Blu Age could not fully meet customer requirements. The tool could only output Java and not meet the new requirement for Python or C#. Furthermore, the migration lacked traceability, making it impossible to validate. This contractor engaged Karsun Solutions, which leveraged its AI-powered ReDuX modernization platform. Using Agentic AI capabilities powered by Amazon Bedrock, ReDuX automatically analyzed the legacy system and generated the required C# programs, Summer Batch Core workflows, and MS SQL Server tables, delivering the 100% traceability needed to successfully complete the pilot.

About the Customer

The customer was one of three vendors awarded a contract for a cloud services project for a state government agency. This project’s goal is to modernize a core business system by converting legacy mainframe code to Python or C# while moving to a cloud-based platform.

Customer Challenge

A state government agency initiated a high-priority project to convert its legacy system to a modern, cloud-based platform. The state’s primary goals were to enhance security, improve flexibility, ensure data redundancy, and lower long-term maintenance costs.

The project was structured in two phases: a competitive part one pilot awarded to three bidders, followed by a part two award for the full system conversion given to a single winner from the pilot. The customer team was tasked with migrating a subsystem for the pilot, as it was the least entangled with other subsystems.

The customer’s initial modernization attempt hit two critical roadblocks. First, the agency’s requirements evolved. After initially preferring Java, the state later specified a preference for Python or C#. This immediately put the team’s approach in jeopardy, as AWS Blu Age can only create code in Java. Second, they were unable to show file-level COBOL program traceability to modern programs. This made validation and future maintenance impossible in the mind of the customer. Failure to solve these challenges would result in a failed pilot and disqualification from the lucrative part two of the contract.

The Partner Solution

The pilot contract was explicitly for cloud services. The state agency sought the enhanced security, flexibility, and redundancy that a cloud-native solution provides. The successful solution embraced this by using a suite of AWS-native services. Additionally, Karsun used its AI-powered modernization platform, ReDuX, to solve complex traceability problems in legacy systems and could output modern C# code, directly meeting the new requirements.

The ReDuX platform rapidly analyzed the system and generated a fully modernized, traceable equivalent.

1. Agentic Analysis: First, Karsun used its ReDuX Blueprint tool. This tool, which is powered by Amazon Bedrock, applied GenAI models to analyze the system, including COBOL programs, JCL, and DB2 database tables. This process created a comprehensive and fully documented map of the legacy system’s architecture and business logic.
2. Automated Transformation: With this detailed blueprint, Karsun’s ReDuX Code Companion used agents to automatically transform the legacy application. The modernized solution consisted of:
   • Agentic Analysis: First, Karsun used its ReDuX Blueprint tool. This tool, which is powered by Amazon Bedrock, applied GenAI models to analyze the system, including all COBOL programs, JCL, and DB2 database tables. This process created a comprehensive and fully documented map of the legacy system’s architecture and business logic.
   • Automated Transformation: With this detailed blueprint, ReDuX Code Companion used agents to automatically transform the legacy application. The new, modernized solution consisted of:
     • Modern C# Application: C# programs were generated for every COBOL program. Verifiable, one-to-one mapping solved the traceability problem. This new application is hosted on .NET Core containers over the AWS EKS service or on EC2 instances.
     • Cloud-Native Batch Processing: Summer Batch Core workflows were generated for every JCL, converting all mainframe batch processes into cloud-native, serverless workflows.
     • File Storage: Application files are now stored in AWS S3.
     • Angular Front-End: A new user interface in Angular precisely mimicks the flow of the original mainframe green screens, such as the menu and work order creation screens.
     • MS SQL Server Tables: Every legacy DB2 database table was migrated to a new table in MS SQL Server.

Results and Benefits

Karsun’s AI-powered ReDuX platform successfully delivered a modernized pilot application that met all of the state’s requirements, rectifying the failures of the initial attempt. The primary benefit was the achievement of 100% traceability for the entire application stack.

The key success metric was the one-to-one mapping of legacy assets to modern, cloud-native code, all made possible by the GenAI analysis from AWS Bedrock:

• Every COBOL program was converted to a corresponding C# program, now running in .NET Core containers on AWS EKS or EC2.
• Every JCL was converted to a Summer Batch Core workflow.
• Every DB2 table was migrated to an MS SQL Server table.

This provided the customer with a complete, verifiable, and maintainable modern application, allowing them to successfully complete the pilot.

About Karsun Solutions

Karsun Solutions modernizes enterprise systems enabling agencies to make the next technological advancement their next opportunity to elevate mission capability. Solutions are tailored to meet agencies’ unique needs and optimize operations. These solutions adapt and stay relevant to current trends while using secure, digital architecture built to last. It is a proven modernization partner whose expertise elevates agency capabilities and ensures every next opportunity is within reach.

Learn more about Karsun’s Cloud Solutions.

In a blog published shortly after its annual re:Invent conference, Amazon Web Services (AWS) announced AWS Transform composability. This co-innovation initiative empowers AWS Partners to create specialized modernization AI agents for industry-specific mainframe workloads. As part of the initiative, AWS announced 11 initial co-innovation partners. ReDuX from Karsun Solutions is a member of this inaugural cohort.

AWS Transform composability enables AWS Partners, including Migration and Modernization Competency Partners and Independent Software Vendors (ISVs), to create differentiated transformation solutions by integrating their specialized AI agents, tools, knowledge bases, and workflows with AWS Transform. This collaboration provides customers with access to targeted, specialized solutions tailored to their unique modernization needs.

AWS Transform Composability Benefits 

By integrating partner capabilities, the AWS Transform composability initiative offers significant business value by dramatically improving the speed, accuracy, and specialization of complex mainframe modernization projects.

Cost Savings from Accelerated Modernization

By leveraging specialized AI agents and automation from AWS and its partners, organizations can reduce mainframe modernization timelines from years to months. The increased precision and time savings gained from automating complex, industry-specific tasks translate directly into substantial cost reductions, with reports indicating average cost savings of 30-40% compared to traditional, manual modernization approaches.

Preservation of Critical Business Logic through Specialization

The initiative allows partners (like Karsun’s ReDuX) to build agents that recognize and handle highly technical or industry-specific patterns in legacy mainframe code. For instance, enterprise organizations working with Karsun can leverage the Government Competency Partner’s 15+ years working in highly-regulated industries. Working with specialized partners ensures greater accuracy in code transformation, preserves critical, implicit business rules that generic tools often miss, and ultimately results in a modernized cloud-native application that is both technically sound and functionally equivalent to the mission-critical legacy system.

In addition to these benefits, partner tools, such as Karsun’s ReDuX platform, bring unique insights into the modernization process. As a result, teams can proactively identify risks and eliminate technical debt early. This upfront intelligence leads to a significant reduction in rework and testing cycles, accelerating delivery and increasing confidence in the final, compliant, and scalable cloud solution.

Elevated Capabilities: Enhanced User Insights with ReDuX

One of these enhanced capabilities includes ReDuX’s unique emphasis on user behavior during legacy system analysis. Its agents deliver novel insights into user behavior and intent by combining analysis of the legacy system with user experience artifacts.

The agents then organize complex data into functional requirements, actionable user stories and automated test scripts. This behavioral and functional insight is essential for complex systems modernization, ensuring that the modernized system maintains functional equivalence while meeting the current needs of its users.

By integrating their specialized tools like ReDuX into the AWS Transform ecosystem, partners can build composable transformations that combine their proprietary expertise with AWS’s intelligent automation, accelerating modernization timelines and reducing risk for customers. Visit GoReDuX.ai to learn more.

If you followed us on LinkedIn on Halloween 2019 you may remember our Karsun “Zombie Slayers” pledged to eliminate a common legacy system scourge, dead code. Six years later our zombie code toolkit has expanded to include artificial intelligence (AI). The ReDuX AI-powered modernization platform and its Blueprint Lenses help our agile teams identify threats early and address their presence as part of the modernization process rather than risking cascading issues after deployment.

Three Zombie Code Threats

Zombie code typically refers to sections of source code in a software project that are no longer used or needed but still exist within the codebase. These unused code segments may have been part of previous versions of the software or were once essential but have become obsolete due to changes in requirements, design, or functionality. This creates system scar tissue that further complicates and constrains modernization efforts.

We identified three threats that still haunt enterprise teams today: dead weight code, living dead code, and vulnerable dead code. 

1. Dead Weight Code is not related to any application functionality. Its lack of function leads to resource drain. Remediating this non-functional code siphons away developers’ time and energy creating rework and technical debt.
2. Living Dead Code is dormant code that retains the ability to be activated. Perhaps it supports a feature no longer used by the system. However, this code poses a direct risk because it can negatively impact system output when activated by mistake. In 2019 we recounted Knight Capital’s catastrophic loss of $440 million in 30 minutes. This code woke up a dead zombie method, which incorrectly generated orders, flooding the stock market with trades.
3. Vulnerable Dead Code consists of old libraries or packages. Vulnerable dead code introduces security risks because these old components have known security issues that are easy targets.

Identifying Dead Code with AI

Over the past six years we have honed our zombie fighting skills building the ReDuX platform. Accelerating modernization with AI, the ReDuX platform begins by providing in-depth legacy system insights. This not only helps Karsun agile teams design better modern systems, it helps us identify zombie risks early so they do not impact development later. 

The first step in our process is building a Blueprint of the legacy system then diving deeper with Blueprint Lenses. Legacy subject matter experts (SMEs) upload documentation, codebases, schema and other materials into ReDuX. Using AI ReDuX agents identify the relationships between system code and components. These agents then create several views, or lenses, to understand the system better. 

For instance, a team viewing their system in ReDuX could view their API calls, scroll through requirements and compare the code citations to ensure accuracy. As part of this process they can also identify orphan code. Thus beginning the dead code analysis process.

Addressing Zombie Code Threats with System Blueprinting

Here’s how we use AI-powered Blueprint agents to address the three types of zombie code.

1. Dead Weight Code is addressed using AI to generate system requirements. By matching those requirements with specific sections of code we can also determine when code exists that does contribute to meeting these functional requirements. By only extracting functional equivalents, rather than automatic conversion, we can then abandon this type of zombie code in the legacy system graveyard. 
   
2. Living Dead Code is addressed with AI by speeding up the discovery process. Now legacy SMEs can focus on the work of understanding how every component of the legacy system interacts with internal and external components. And, by fully generating system business rules and business logic they have a clearer picture of potential unintended consequences of living dead code.
   
   Teams can then proactively determine the code and system functionality they will extract from the old system to build the new system. More importantly they can do this incrementally, preserving the old system to build new components one functional slice at a time. This provides an additional backstop against living dead code.
   
3. Vulnerable Dead Code is also targeted by extracting only the code we need. Further by focusing on functional equivalents we can modernize to optimize. Using AI code companion agents for development, we replace these libraries with modern architecture that is secure by design.

Whether moving away from risky code or outdated components, time is of the essence when trying to outrun zombie code. Providing four times faster delivery with two times less rework ReDuX is an essential tool for our zombie slayer teams. If you’re facing a similar challenge, our AI empowered teams address complex legacy challenges for government organizations and enterprise teams with complex mission-critical applications. Learn more about our capabilities at https://karsun-llc.com/solutions/.

HERNDON, VA, OCTOBER 27, 2025 – Karsun Solutions, a leading technology modernization firm, is proud to announce that CRN, a brand of The Channel Company, has named Judewin Gabriel, Lead Cloud Architect, as a 2025 CRN Next-Gen Solution Provider Leader. This CRN list honors solution provider professionals who stand out for their innovative contributions to the growth and success of their organization. 

The annual list spotlights rising-star executives, managers and directors who are 40 years of age or younger and already demonstrate strong leadership capabilities in their roles with solution provider organizations, including technology integrators, VARs, MSPs, MSSPs and IT consultants.

“We are thrilled to celebrate this accomplishment with Judewin,” said Badri Sriraman, Senior Vice President Karsun Innovation Center. “His work on the ReDuX platform has positioned Karsun as an innovative systems integrator with results-driven experience.”

Judewin Gabriel is the Lead Cloud Architect for Karsun’s ReDuX AI-powered modernization platform. Using agentic AI ReDuX accelerates modernization. It analyzes complex legacy systems, translates code, generates requirements, plans migrations, writes code, and tests for functionality. It is a complete digital workforce for creating modern cloud-native applications. Learn more about ReDuX at GoReDuX.ai.

Using ReDuX Karsun teams can now deliver 4x faster with 2x less rework. Its teams provide modern software development, cloud, data, and AI/ML solutions to government agencies and enterprise organizations. It offers specialized expertise in acquisition, aviation, grants management, and fleet management systems modernization. Learn more about its enterprise modernization solutions at karsun-llc.com/solutions.

“The individuals named to CRN’s 2025 Next-Gen Solution Provider Leaders list have set themselves apart as driven pioneers in the early stages of their IT channel journeys,” said Jennifer Follett, Vice President, U.S. Content, Executive Editor at CRN, The Channel Company. “We celebrate their outstanding and inventive impact on their organizations and the broader IT channel. We’re excited to see how they continue to shape and strengthen the channel in the years ahead.”

The 2025 CRN Next-Gen Solution Provider Leaders list is available online at www.CRN.com/nextgen. 

About Karsun Solutions

Karsun Solutions modernizes legacy systems enabling government agencies and enterprise organizations to elevate mission capability. IT solutions from Karsun are tailored to meet mission-driven organizations’ unique needs and optimize operations. These solutions adapt and stay relevant to current trends while using secure, digital architecture built to last. It is a proven modernization partner whose expertise ensures every next opportunity is within reach. Learn more at Karsun-LLC.com.

About ReDuX

The ReDuX AI-powered platform expedites the modernization of mainframe and other legacy system applications. Key tools in the platform include its blueprinting agents, which provide deep insights into system structure and behavior, and its transformation agents, which use the outputs from the blueprinting agents to generate code and facilitate incremental migration. These agents also bring enhanced security and privacy, offering project-specific usability by interfacing with various systems, overcome hallucinations noted in large language models (LLMs), and provide proven prompt templates to save developers time and effort. Get started at GoReDuX.ai.

Karsun Solutions Contact
marketing@karsun-llc.com

About The Channel Company 

The Channel Company (TCC) is the global leader in channel growth for the world’s top technology brands. We accelerate success across strategic channels for tech vendors, solution providers, and end users with premier media brands, integrated marketing and event services, strategic consulting, and exclusive market and audience insights. TCC is a portfolio company of investment funds managed by EagleTree Capital, a New York City-based private equity firm. For more information, visit thechannelco.com.

Follow The Channel Company: LinkedIn and X.

© 2025 The Channel Company, Inc. The Channel Company logo is a registered trademark of The Channel Company, Inc. All other trademarks and trade names are the properties of their respective owners. All rights reserved.

The Channel Company Contact: 
Kristin DaSilva
The Channel Company 
kdasilva@thechannelcompany.com