Rudder 9.1 release: automate your CIS compliance and security scoring

Find out what’s new in the Rudder 9.1 release, designed for managing your daily operations, dealing with audits, and saving you from wasting time on complex interfaces or proprietary scripting languages. Discover how the latest version makes Maintenance in Operational Condition easier, while strengthening your security posture through improved traceability and more detailed compliance reporting.

Built specifically for hybrid infrastructures, Rudder platform automates your IT compliance and operational security. Designed to help Ops and Security teams meet standards such as NIS2, ISO 27001, and CIS Benchmarks thanks to real-time system hardening and monitoring.

1. Rudder 9.1 interface: get total transparency over changes and compliance exceptions

A tool should never make your life more difficult. In order to get teams to adopt a new compliance solution, it better be intuitive.

Stay in control with the Activity Feed

In this release, the main dashboard includes a new Activity panel. No more digging around to find out who changed what. Now you can instantly see the most recent modifications in the interface. An essential breadcrumb trail for teams or simply to help you pick up where you left off.

Tame the complexity of visualizing exceptions

Want to disable a hardening rule for a specific group? What about adjusting a parameter for a critical node? Managing exceptions becomes a piece of cake with our Policy and benchmark compliance solution. In Rudder 9.1, these exceptions are now displayed in a tree structure.

A new way of visualizing exceptions: in this example, the parameter sshd_approved_ciphers has been reconfigured twice, once at the Production servers group level (where only 3 ciphers are allowed) and again at the prod-db-server node level (where only the aes256-ctr cipher is allowed).

The Payoff: immediate clarity during configuration, with rule inheritance and exceptions displayed for you at a glance.

2. Patch management: exclude critical packages to secure your ops

Keeping your systems up to date is good. Not breaking your operations is even better. Until now, Rudder just configured critical services – now, this has been extended to patch management.

Let’s say you have a business application that requires a specific package version. A global update could ruin your day. With Rudder 9.1, you can now explicitly exclude certain packages from an entire patch campaign. You stay in full control and the rest of the system stays secure, while sensitive components remain untouched.

Package exclusion in Patch Management: in this example, security patches are applied to production servers while explicitly excluding glibc, openjdk, and postgresql from the campaign.

3. Compliance reporting: prioritize remediation by node group

Raw data means nothing without context. For a CISO or Ops team, the real question isn’t “are we compliant?” but “what should we do first?”.

Scoring by node group

Reporting for CIS Benchmarks and in the Policy and benchmark compliance solution now offer more detailed insights. You can view scores by node group. After all, you wouldn’t apply the same hardening level to a Dev environment as you would to a production DMZ.

CIS scoring by node group: viewing the compliance results for a specific production server cluster.

The payoff: teams can focus on the areas they actually work in and prioritize remediation where risk is the highest.

The same goes for patching: you can filter the list of available patches by group to immediately isolate critical machines that need attention.

4. Traceability and interoperability: gear up for audits

Whatever regulatory standard you need to comply with (NIS2, ISO 27001, HDS, etc.), making sure an action is traceable is just as important as the action itself.

Data export

Rudder 9.1 makes it easier to share information across teams. You can now export your tables (such as CIS benchmarks, campaign results, and rules) to third-party tools or provide them directly to auditors.

Change logs: signal, not noise

The Change Logs feature now filters events to show only user actions, giving you a cleaner, more relevant, and more transparent history, plus the ability to roll back an action in case of human error. This helps you keep your infrastructure audit-ready, without the hassle of manual sorting.

 

With the 9.1 release, Rudder is once again showing how compliance can empower Ops teams, rather than holding them back.

Secure your IT systems, automate your policies, and maintain full visibility over your environments. Try Rudder free for a whole month.

Get started with our one-month trial version and discover Rudder’s full potential.

Share this post

Scroll to Top
Rudder robot named Ruddy makes an announcement.

Rudder 9.1: less noise, more control. Compliance without friction.

Security management module details

This module targets maximum security and compliance for managing your infrastructure, with enterprise-class features such as:
Learn more about this module on the Security management page

Configuration & patch management module details

This module targets maximum performance and reliability for managing your infrastructure and patches, with enterprise-class features such as:

Learn more about this module on the Configuration & patch management page