A recent study earlier this year surfaced that in many organizations, platform engineering teams currently struggle with measuring and providing baselines that could set up useful insights for their team, their current and prospective customers, in addition to executives. Similar to lacking telemetry around application health, it will be difficult to tell a compelling story about whether a Platform Engineering practice is moving in the right direction. 

The goal of this short blog post is to provide a starting point for teams who currently simply don’t know how or where to start, or what “good” could look like. The example provided below isn’t perfect but it hopefully help some teams gain some perspective on how to implement this in practice.​

For our example below, we’ve chosen to pick a very narrow “Unified Secrets Manager” platform product / service that allows developers or AI agents (or subagents), to interact with an API that allows CRUD operations for Kubernetes-based application secrets. The scorecard is split into 4 general sections:

  • North Star - this section most closely mirrors the MONK metrics with a few topical additions chosen by the organization in question
  • Adoption and engagement drivers - this section focuses on the more strategic functionality or areas that drive one, or all of, developer productivity, happiness, adoption, or areas where we may think if we invest more engineering time in, we’ll realize bigger gains on any of those facets
  • Platform health - most teams are well versed in these - it’s a combination between The DORA “Golden 5” and some service specific SLOs that the hypothetical team in question has decided to emphasize and share more broadly.
  • Financials - usually the topic that executive level audiences care the most about - “can we get unit economics so we can both benchmark or measure for effectiveness / efficiency?”

The example is fairly self-explanatory. A few callouts:

  • RYG - Red, Yellow, Green. A, traffic-light style, color-coded, framework used in project management, business, and healthcare to quickly assess status or health.
  • Note the ownership column in the relevant sections where appropriate. Yes, a sliver of a product manager, or a dedicated one, to the Platform Engineering team is a must. In some areas, the only owner is the Platform Product Manager (PPM)
  • It’s perfectly acceptable to have some areas and metrics under active development as long as teams provide an ETA for when they expect to have those available.
  • These types of scorecards are really useful during Platform Quarterly Business Review (QBR) meetings / forums. It’s OK to capture them, store them in a VCS, so you can create a “year in review” or Year-over-Year lookbacks or comparisons.
  • Feel free to experiment with the approach, layout, and visualization. There isn’t a right or a wrong answer - you’d know what works best for your organization’s culture, audience, and preferences. Finally, this works for any platform capability: CI templates, env provisioning, service mesh onboarding, DB-as-a-service, etc

Good luck!

North Star Metrics
Customer Adoption & Satisfaction
Metric Status Target Current Insight Owner
Total Addressable Market (TAM) Adoption Y 46%
(513 of 1099)
33%
(362)
Target quantification set using TAM of services running in Kubernetes as of January 1st, 2026.

TAM size changes will be revisited annually.
@PlatformProductManager
@Platform Engineering Team
"Unified Secrets Manager Meets My Needs" G 4.5 4.85 18 exit-survey customer responses collected in late Jan after releasing the "Plaintext/JSON" feature.

Customers indicated a desire for integration with AI agents, Relational Data Stores, and API Gateway keys, as well as supporting automatic credential rotation.
@PlatformProductManager
@Platform Engineering Team
"Unified Secrets Manager is Easy to Use" G 4.5 4.88 18 exit-survey customer responses collected in late Jan after releasing the "Plaintext/JSON" feature.

Customers pointed out some UI-side improvements when using the secrets type screen.
@PlatformProductManager
@Platform Engineering Team
Customer Satisfaction (NPS-based) G ≥9 9.625
(N=18)
Measurement will be tracked quarterly. @PlatformProductManager
@Platform Engineering Team
Onboarding Time TBD Metric currently under development Measurement will be tracked at the end of the onboarding experience. @PlatformProductManager
@Platform Engineering Team
Key Outcomes / Insights N/A The new self-service path allowed product teams to successfully meet the CISO goal of recently rotated credentials (<6 months) across the entire environment in a timely manner due to the ease and simplicity of use. @PlatformProductManager
@Platform Engineering Team
TAM Adoption = represented by the Sum of distinct services using Secrets Manager running in the production environment for >24hrs / Sum of distinct services running in the production environment for >24 hrs.
Onboarding Time = measured at the P50 & P90 interval between onboarding completion - onboarding start in minutes
Top Customer Adoption & Engagement Drivers
Leading Feature Requests / Product Gaps
Title & Roadmap Rank Description GA Planned / Comments
1st: "Copy" Button for secrets JSON code After creating a secret, there is still a manual step that requires a developer to add it to the right yaml annotation. Having a way to automatically pull that into the developer's clipboard was among the top requested features. Delivered in Q3, 2025
2nd: Edit and Delete Secrets Editing/deleting of secrets was the most requested feature by our customers. Out of 18 responses, all 18 asked for this feature. Delivered in Q4, 2025
3rd: Support for JSON / PlainText Credentials 15 of 18 surveyed users requested support for JSON / plain text secrets.

Additionally, the Compute Platform team surfaced data that another 327 services owned would use this functionality if it were available.
Planned and scheduled for delivery in Q1, 2026
Key Customer Journey Opportunities
Lever Support Volume Comments Owner / Next Steps
TBD Will be identified with the next round of customer empathy sessions / discovery. @PlatformProductManager
Platform Health
Reliability and Performance
Metric Status Target Current Insight Owner
SLO - Availability G P90 ≥ 99.90% 99.93% Measurement tracking within expectations @Platform Engineering Team
SLO - Latency G Read Path
P50 ≤ 20 ms
P90 ≤ 50 ms
Write Path
P50 ≤ 45 ms
P90 ≤ 150 ms
Read Path:
P50 = 7ms
P90 = 10ms
Write Path:
P50 = 10 ms
P90 = 13 ms
Measurement tracking within expectations @Platform Engineering Team
Incidents T3 (Trailing Last 3 Months) G P1 = 0 Inc
P2 = 0 Inc
P3 ≤ 1 Inc
0 @Platform Engineering Team
Mean Time To Restore (MTTR) G P1 & P2 ≤ 4 hr N/A No USM-driven incidents in January @Platform Engineering Team
Deployment Frequency (DF) G Prod Deploys ≥ 15/mo 25 @Platform Engineering Team
Lead Time for Changes (LTC) Y P50 ≤ 2 hrs P50 = 2.5 hrs A single MR that was pending code review sign-off is driving up the median @Platform Engineering Team
Change Failure Rate (CFR) G ≤ 5% 4% 1 MR had to be rolled back and reworked prior to redeployment @Platform Engineering Team
MTTR = the average time from incident creation to a successful recovery deployment completion (only includes incidents linked to a specific deploy), captured monthly
DF = number of successful production deployments, captured monthly
LTC = the wall clock time between a MR being created and a MR deploy (excluding weekends, business, and company holidays), captured monthly
CFR = the percentage of production deployments that result in a failure requiring remediation (such as a rollback, rework / hotfix, or another incident), captured monthly
Security & Compliance
Metric Status Target Current Insight Owner
SLO - Critical Vulnerability Remediation G ≤30 cal. days N/A No current vulnerabilities identified @Platform Engineering Team
SLO - USM Authentication Failures TBD TBD TBD Metrics under development, target ETA: EOM, February, 2026 @Platform Engineering Team
Critical Vulnerability SLA = Timeframe to remediate vulnerabilities after release of fix version.
Authentication Failures = invalid creds, permission denied, rate-limited, or anomaly spikes.
Financials
Platform Cost Profile & Economics
Metric Status Target Current Insight Owner
Compute, Network Costs R $1,000 / mo. $2500 / mo. Cost optimizations identified, need prioritization prior to delivery. @Platform Engineering Team
Cloud Provider API Request Cost G $500 / mo. $277 @Platform Engineering Team
Storage per Secret G $1.00 $0.40 @Platform Engineering Team