New capabilities in Puppet Remediate™ 1.1.0
Seamless integration with Tenable.sc
We heard from customers that an integration between Puppet Remediate and Tenable.sc would help both InfoSec and IT Ops teams collaborate to reduce the risk in their business by remediating vulnerabilities faster. We are pleased to announce that integration is available today in Puppet Remediate 1.1.0.
Set up is simple — add your Tenable.sc connection details to Puppet Remediate and the rest is automatic. No more spreadsheets!
Security, control and accountability
RBAC (role-based access control) is extremely important when IT Ops has access to make changes on business critical servers to remediate vulnerabilities. This release enhances RBAC permissions to Puppet Remediate so an administrator can now control who can do what in Puppet Remediate, including:
- Adding or removing credentials, sources and tasks
- Running tasks
- Performing directory administration
Puppet Remediate 1.1.0 also introduces LDAP and Active Directory integration, as well as the ability for administrators to create users locally in Puppet Remediate. Now you can leverage existing passwords to log into Puppet Remediate, and administrators can control access centrally in their directory.
UX improvements to deliver vulnerability details at each step
Last but not least, the task workflow in Puppet Remediate is now even more intuitive. The context of the vulnerability now comes with you as you build your task. Inaccessible nodes are now more explicitly highlighted right from the first step in your workflow. And Puppet Remediate now offers more explicit feedback as soon as you run a task.
We hope you enjoy the new capabilities in Puppet Remediate, and would love to hear feedback directly from you on this release and what you’d like to see in future releases. Reach out to me (@Jonathan) on the Puppet Community Slack or email email@example.com and share your ideas.
Jonathan Stewart is a principal product manager at Puppet.
- Read this for more information on Puppet Remediate
- Why don’t we share remediation tasks between organizations? Watch this recent talk (28 mins) from Puppetize PDX