With vulnerabilities and security breaches on the rise, the latest product from Puppet helps IT teams find, prioritise and remediate mission-critical vulnerabilities.

Puppet has announced its first vulnerability remediation solution, Puppet Remediate, with initial channel partners, Bitbone and Fishtech.

According to Forrester’s 2018 security survey published in 2018, 58% of enterprise organisations suffered a breach at least once in the previous year, and over 41% of those external breaches exploited some software vulnerability.

The problem is that the vulnerability management workflow⁠– from vulnerability reports run by security teams to vulnerability remediation done by IT operators – is fragmented and manual, making vulnerability remediation slow and leaving IT infrastructure exposed to external attacks for too long. 

A 2018 report by the Ponemon Institute found organisations spend around 320 hours a week on vulnerability responses.

“The vulnerability management process most organisations use today is not sustainable for reducing the security risk of external attacks,” said Matt Waxman, head of product at Puppet.

“There is a major gap between sophisticated scanning tools that identify vulnerabilities and the fragmented and manual, error-prone approach of fixing these vulnerabilities.”

“Puppet Remediate closes this gap giving IT the insight they need to end the current soul-crushing work associated with vulnerability remediation to ensure they are keeping their organisation safe.”

Puppet Remediate dramatically reduces the time from vulnerability detection to remediation across a company’s infrastructure, through key integrations with security partners to unify infrastructure and vulnerability data, quick identification of what infrastructure resources are impacted by vulnerabilities, and the ability to take immediate action to remediate vulnerable packages without requiring any agent technology on the vulnerable systems on both Linux and Windows through SSH and WinRM.

“Puppet Remediate offers real added value with its new functions to our customers,” said Sebastian Scheuring, CEO Bitbone AG.

“It drastically automates the workflow of vulnerability remediation through taking out the manual, mundane and error-prone steps that are required to remediate vulnerabilities.

“Continuous scans, remediation tasks and short cycles of update processes significantly increase the security level of IT environments.”