Paul Krill
Editor at Large

Puppet devsecops updated to deal with security maladies

news
Apr 23, 20252 mins
Application SecurityDevSecOpsGenerative AI

As AI powers more threats, Perforce's release improves collaboration between operations and security teams.

cybersecurity
Credit: JLStock

Perforce has updated its Puppet Enterprise Advanced platform for devsecops to offer more advanced remediation options with the goal of reducing risk in an era of AI-powered security threats.

Announced on April 22, the 2025.2 release of the platform fosters greater collaboration between platform and security teams, Perforce said. The company stressed that the divide between infrastructure management and security operations can delay a swift response. Today’s evolving threat landscape is becoming more sophisticated and agile, in part due to the misdirected power of AI.

Puppet’s latest platform update lets enterprises rapidly address known vulnerabilities by integrating security remediation within core infrastructure workflows to speed up responsiveness to identified threats, according to Perforce. Embedding this capability in established processes gives operations and security teams a shared understanding of their security posture and automates critical remediation tasks to eliminate inefficient cross-functional handoffs.

A collaborative environment shrinks the opportunity window for attackers, said Perforce. Future Puppet releases will speed up the pace further with human-in-the-loop, AI-driven automation. Puppet enables the platform team to support security initiatives to boost resiliency and reduce the MTTR (mean time to remediate).

Remediation of known vulnerabilities is streamlined by integration with security scanners. Tenable Nessus is included out of the box, and other popular scanners are available via an extension architecture and API framework. Also, self-service workflows and cross-functional visibility break down siloes to eliminate efficiency bottlenecks and accelerate resolution, Perforce said.

Paul Krill

Paul Krill is editor at large at InfoWorld. Paul has been covering computer technology as a news and feature reporter for more than 35 years, including 30 years at InfoWorld. He has specialized in coverage of software development tools and technologies since the 1990s, and he continues to lead InfoWorld’s news coverage of software development platforms including Java and .NET and programming languages including JavaScript, TypeScript, PHP, Python, Ruby, Rust, and Go. Long trusted as a reporter who prioritizes accuracy, integrity, and the best interests of readers, Paul is sought out by technology companies and industry organizations who want to reach InfoWorld’s audience of software developers and other information technology professionals. Paul has won a “Best Technology News Coverage” award from IDG.

More from this author