Puppet devsecops updated to deal with security maladies

Perforce has updated its Puppet Enterprise Advanced platform for devsecops to offer more advanced remediation options with the goal of reducing risk in an era of AI-powered security threats.

Announced on April 22, the 2025.2 release of the platform fosters greater collaboration between platform and security teams, Perforce said. The company stressed that the divide between infrastructure management and security operations can delay a swift response. Today’s evolving threat landscape is becoming more sophisticated and agile, in part due to the misdirected power of AI.

Puppet’s latest platform update lets enterprises rapidly address known vulnerabilities by integrating security remediation within core infrastructure workflows to speed up responsiveness to identified threats, according to Perforce. Embedding this capability in established processes gives operations and security teams a shared understanding of their security posture and automates critical remediation tasks to eliminate inefficient cross-functional handoffs.

A collaborative environment shrinks the opportunity window for attackers, said Perforce. Future Puppet releases will speed up the pace further with human-in-the-loop, AI-driven automation. Puppet enables the platform team to support security initiatives to boost resiliency and reduce the MTTR (mean time to remediate).

Remediation of known vulnerabilities is streamlined by integration with security scanners. Tenable Nessus is included out of the box, and other popular scanners are available via an extension architecture and API framework. Also, self-service workflows and cross-functional visibility break down siloes to eliminate efficiency bottlenecks and accelerate resolution, Perforce said.