Automate IT and infrastructure, manage complex workflows, and mitigate risk at scale.
Try the full-featured Puppet Enterprise for free on 10 nodes.
Find and prevent compliance failures
Continuous Delivery for Puppet Enterprise
Build, test, and deploy infrastructure as code faster and easier
Compliance Enforcement Modules
Remediate to stay in compliance
Content & Modules
Pre-built scripts to automate common tasks
Get Puppet Enterprise
First 10 nodes are free!
Try it now
Request a demo
Find thousands of component modules built by the community and guidance on using them in your own infrastructure.
Visit Puppet Forge >>
Open Source PuppetPerfect for individuals and small infrastructure
BoltAutomate tasks in orchestration workflows
See all open source projects >>
Contribute to open source projects >>
Take the manual work out of enforcement and stay in line with security benchmarks through automated compliance configuration.
READ THE SOLUTION BRIEF 🧑💻 REQUEST A DEMO
Compliance Enforcement Modules (CEM) are self-enforcing policy as code modules directly aligned to CIS and DISA STIG benchmarks. With CEM, you can set and preserve compliant infrastructure configurations and keep up to date with ever-evolving standards. CEM are created, supported, and updated by Puppet, and are available within Puppet Enterprise.
Puppet Comply works with Puppet Enterprise to give you a holistic view of your organization’s compliance status. With CEM, you can automatically take action to enforce desired state operations in line with industry standards across your system configurations.
Turning compliance policies into enforceable code can be complex and extremely time-consuming. With CEM, you can automate compliance enforcement and eliminate the pain of implementing and updating compliance configurations manually.
CEM are maintained and updated as new CIS and STIG recommendations become available, ensuring that you’re always up to date with the latest standards. Reduce your overall compliance risk by ensuring that your systems remain in a compliant state.
CEM are highly flexible and customizable. Comprehensive configuration options allow you to tailor the content to fit your environment, easily disable controls that aren’t applicable to your organization, and track and monitor known compliance exceptions with Puppet Comply.
Puppet Comply and Compliance Enforcement Modules support a range of operating systems and versions for finding and fixing compliance issues, including Windows and Linux. See below for a full list.
Download CEM for Windows Download CEM for Linux
Run the full-featured Puppet Enterprise instance on up to 10 nodes today with no commitment.
Read the PDF on the Compliance Enforcement Modules
Want to know what Puppet can do for your org? Drop us a line.