SaltStack Comply includes access to a live and growing repository of industry-standard compliance profiles. Each profile includes hundreds of up-to-date issue scans, descriptions, and automated remediation actions. Users can also create jobs for review and approval before changes are executed. SaltStack integrates with third-party systems like ServiceNow for change tracking and reporting.

SaltStack Protect actively ingests vendor CVE advisories, builds scans and remediation workflows to address them, and delivers this security content to customers as a service. Security and operations teams can then use SaltStack configuration automation to check installed package versions on all systems, identify vulnerabilities, and install patches to remediate them.