Get Puppet Enterprise
Puppet Comply
Automate and enforce policy as code.
Achieving continuous compliance is easier than you think.
What is Puppet Comply?
Puppet Comply enables continuous compliance monitoring across hybrid infrastructure with less overhead and manual work.
- Get a holistic view of your organization’s compliance status throughout cloud and on-prem environments
- Conduct regular scans to identify and remediate failures on a consistent basis
- Enforce desired state policy as code with expert-built content and modules configured to your environment
Compliance Enforcement Modules
Compliance Enforcement Modules (CEM) from Puppet take the manual work out of continuous compliance management. These Puppet-created and supported modules are designed to accelerate time-to-value by providing you with self-enforcing policy as code.
Compliance Enforcement Modules enable you to:
- Scan your infrastructure and assess your compliance status with CIS benchmarks
- Identify and remediate the cause and source of compliance issues and determine which configuration changes must be made to your systems
- Maintain compliance audit readiness and stay fully up to date with the latest benchmark versions
- Automate exception handling by creating custom profiles that allow you to enable or disable specific rules in a benchmark
Define a secure baseline with CIS Benchmarks™
Puppet Comply assesses your infrastructure against CIS Benchmarks, a set of guidelines for secure system configuration from the Center for Internet Security (CIS).
Developed by a community of cybersecurity experts, CIS Benchmarks are widely adopted by organizations worldwide and serve as a baseline for many common regulatory requirements, including PCI, NIST and FISMA, HIPAA, GDPR, and ISO/IEC 27001.
Get a holistic view of compliance status
- Know exactly which settings and configurations need to be applied to each system by mapping controls to your infrastructure — using classification data such as operating system, version, role, and environment.
- Don’t waste time chasing false positives. Quickly identify the cause and source of compliance issues with node-level scan results, and drill into benchmark details for guidance on how to remediate failures.
- Eliminate manual exception handling. Define custom profiles to disable the rules you don’t want to enforce and scan only for the ones that apply.
Verify remediation with on-demand scans
- Enable IT operations teams to run their own scans to immediately verify that failures have been remediated and that systems have been brought under compliance.
- Close the gap between remediation and the next scan, when systems may be out of compliance without your knowledge.
- Eliminate bottlenecks caused by cross-functional dependencies, such as coordination of scanning windows.
Remediate compliance failures at scale
Remediate failures and establish a baseline for compliance standards using modules created by Puppet experts and configured to your environment.
Automate policy enforcement with compliance as code
Define compliance policy as code to incorporate compliant configurations into your baseline, automatically apply the appropriate settings to every system in your infrastructure, and enforce a compliant state with automatic drift detection and correction.
Reduce the burden of audit preparation
Audits don’t have to be an expensive fire drill. Prove infrastructure-wide compliance with reports that are easy to generate and understand.