Eliminate the Burden of Managing and Maintaining Builds
Puppet Core provides a vendor-backed foundation for infrastructure automation with stable, hardened builds designed for resilience and compliance.
Backed by Perforce, Puppet Core delivers tested, secure automation in a streamlined commercial package, making it ideal for enterprises with strict regulatory and operational requirements.
What’s Included with Puppet Core
With vendor-backed SLAs for high- and critical-severity CVEs, Puppet Core delivers timely remediation, stronger security, and continuous compliance.
- CVSS Score 9-10: 14 Days
- CVSS Score 7-8.9: 30 Days
Access stable, enterprise-grade Puppet builds rigorously tested to Perforce’s enterprise standards.
Avoid the overhead of building, maintaining, and certifying open source Puppet builds yourself.
Security and compliance can’t be an afterthought in today’s threat landscape.
Puppet Core includes Security Compliance Enforcement, ensuring infrastructure is continuously aligned with industry security standards.
Reduce audit preparation time, minimize risk, and maintain hardened configurations with confidence.
Commercial customers receive enablement from a Certified Puppet Engineer who provide hands-on guidance for onboarding, best practices, and ongoing adoption support.
Puppet Core accelerates time-to-value, strengthens team confidence, and maximizes ROI by ensuring organizations get the most out of their automation investment.
Extend Automation to the Edge
Modern infrastructure doesn’t stop with servers. Combining Puppet Edge brings consistent automation and governance to distributed systems, from firewalls to point-of-sale endpoints.
Are you Managing Infrastructure with Open Source Puppet?
Relying on community builds often means taking on the burden of patching, maintaining, and validating software on your own, a process that consumes time, resources, and introduces unnecessary risk.
The Puppet Core Difference:
When reliability, stability, and security matter, Puppet Core delivers. Every build is rigorously tested and certified, so you can trust your automation foundation.
With Puppet Core, you get:
- Vendor-backed SLAs for guaranteed support
- Hardened binaries for enhanced security
- Built-in compliance enforcement to stay audit-ready
Organizations that move to Puppet Core benefit from:
- Reduced risk through enterprise-grade builds
- Improved software quality with consistent, tested releases
- Faster delivery velocity without the overhead of managing open source internally
Talk to our team about Puppet Core licensing and see how vendor-backed automation can transform your operations.
Flexible. Compliant. Proven.
Puppet Core combines open source flexibility with vendor-backed security, compliance, and resilience, giving organizations the confidence to run critical infrastructure at scale.
FAQs About Puppet Core
Puppet Core is a hardened, vendor-backed version of Puppet designed for organizations that demand the control and flexibility of open source without compromising on security, compliance, and operational stability. With certified builds, CVE remediation, and policy-driven compliance, it reduces risk, accelerates audits, and ensures confidence in critical infrastructure.
Yes. Puppet Core is available under a free Developer License for use on up to 25 nodes. To access it, simply sign up through Puppet Forge. If you need to manage more than 25 nodes or require enterprise-grade support, you can upgrade to a commercial license.
Puppet Core includes everything you get with Open Source Puppet plus enterprise-grade benefits that reduce risk and strengthen compliance:
- Hardened, certified builds rigorously tested to enterprise security standards
- SLA-backed CVE remediation (14–30 days depending on severity) for faster patching and reduced exposure
- Security Compliance Enforcement modules to continuously align with CIS Benchmarks and DISA STIGs
- Training and enablement from Certified Puppet Engineers to accelerate adoption and maximize ROI
Yes. You can read more about the changes in our blog, "Our Plans for Open Source Puppet in 2025."
Puppet Core provides the essential foundation for secure, vendor-backed automation, while the Puppet Enterprise platform extends those capabilities with advanced governance, compliance, orchestration, and AI-powered features. Enterprise editions are designed for organizations that need broader automation coverage, deeper compliance controls, and greater scalability.
Not sure which solution is right for your organization? Complete the form at the top of the page to book a meeting with a Puppet expert to discuss your automation needs, or explore the Decision Maker’s Guide to Puppet for a detailed comparison.
Yes. Puppet Core is fully compatible with Open Source Puppet, making migration straightforward. It also includes vendor-backed support, certified builds, and training from Puppet experts to accelerate adoption, reduce risk, and help teams get immediate value from their automation investment.
Yes. All commercial Puppet Core licenses come with a training engagement delivered by certified Puppet experts.
Yes. Puppet Core provides declarative, model-based automation for managing server infrastructure across Windows, Linux, hybrid, and cloud environments. When combined with Puppet Edge, Puppet Core is extended to cover distributed hardware such as firewalls, network appliances, and other edge devices. Together, they allow teams to orchestrate both declarative (desired state) and imperative (task-based/playbook) workflows within a single, unified platform.
Yes. Puppet Core SLAs cover both the Puppet software itself and the third-party libraries it depends on. This ensures that critical and high-severity vulnerabilities in those components are also remediated within the guaranteed SLA windows, giving organizations consistent protection and compliance across their entire Puppet Core deployment.
Yes. Once a developer signs the EULA, they gain access to the latest Puppet Core build for development and testing purposes. This ensures developers can work with up-to-date, vendor-certified software while building and validating automation content. Read more about how you can develop and contribute to modules on the Forge and ensure compatibility with Puppet Core and Puppet Enterprise: Developing Modules for Puppet and the Forge in 2025
Puppet Core follows strict SLA timelines:
- CVSS Score 9–10 (Critical): Patched within 14 days
- CVSS Score 7–8.9 (High): Patched within 30 days
Security Compliance Enforcement consists of prebuilt modules aligned with CIS Benchmarks and DISA STIGs. These modules are developed, tested, and maintained by the Puppet engineering team at Perforce, ensuring they remain current with evolving standards and deliver reliable, enterprise-grade compliance enforcement.