Detecting and resolving vulnerabilities with Puppet

Detecting and resolving vulnerabilities with Puppet The vulnerability in log4j has once again shown us that detecting and resolving vulnerabilities in your IT infrastructure can be a daunting and very time-consuming task. The best way to ensure that you can easily detect and fix these issues is to integrate them into your current way of working and your current set of tools. That is why Enterprise Modules has developed a set of puppet modules that allow you to integrate vulnerability scanning and remediation into your Puppet workflow.

Customer benefits

Our solution integrates proven vulnerability scanning into Puppet and allows you to use the Puppetdb as a single source of truth of the detected vulnerabilities in your IT infrastructure. Once Puppet has detected the vulnerability, you can also use the strength of Puppet to automatically fix the vulnerability and ensure that it keeps on being fixed.

To ensure that you don’t have to write all of the Puppet code for known vulnerabilities, complementary to the vulnerability module, we have developed a Puppet module that contains fixes to known vulnerabilities. This module is open-source and will grow to include fixes to many known vulnerabilities.

Instant business value

The fact that these two modules integrate seamlessly with your current Puppet or Puppet Enterprise infrastructure and workflow is a big plus. If you already have Puppet, there is no need to invest in other tools and integrate different tools into your DevOps workflow.

Some of the vulnerability scanning tools are notoriously high priced. Our solution, however, is available at a low cost.

More information

If you would like to have more information about this solution,, contact us for details. or by phone: +31 (0)30-601 6000


Enterprise Modules is committed to helping our customers enjoy all the benefits of Puppet and Puppet Enterprise for all components in the IT infrastructure of large enterprises. Also, the non-open-source components like Oracle databases, Oracle WebLogic and IBM MQ messaging.

About Enterprise Modules

Enterprise modules is the leading developer of enterprise-ready puppet modules for Oracle databases and Oracle WebLogic. Our puppet modules help sysadmins and DBAs to automate the installation, configuration, and management of their databases and application server systems. These modules allow them to make managed, consistent, repeatable, and fast changes to their infrastructure and automatically enforce the consistency.