Puppet releases new security and compliance integration

Puppet announced enhancements to support greater self-service automation and provide customers with greater security in hybrid infrastructure. For example, Comply is about to launch a new compliance enforcement module, Enterprise is getting a new ServiceNow Graph Connector Program, and Forge provides a new malware scanner function for the newly released module.

The new Comply module implements policy-as-code configuration management for Windows and Linux based on the Internet Security Benchmark Center (see dashboard). It provides industry-recognized best practices for network security standards for code configuration to ensure security compliance. Abby Kearns, Puppet’s CTO, told SiliconAngle: “Right now, compliance is what too many companies do with spreadsheets.” “This is usually a tedious manual process where one person has to check the wiring. If there is anything we do. It can be automated, so compliance should be the first thing we automate.”

Better protection module

The ServiceNow Graph connector is also new. It can automatically collect data and reports for all ServiceNow products. “The importance of using accurate and correct real-time information in a hybrid infrastructure is essential to accelerate the release and resiliency of IT projects,” the company explained. “Wrong mapping of configuration items or inaccurate data will only increase complexity and sometimes cause economic losses.”

In addition, the module market Forge has also added a malware scanning function, which will automatically check for newly released modules before the end of the year. The extension “allows users to have peace of mind when selecting and using our modules,” the company said. “This additional layer of protection increases trust in our content, benefits customers and open source Puppet users, and encourages people to think and build more safely while contributing to Puppet’s growing community.”