TechPrufer
Get started
Palantir
Palantir logoPalantir · Feature trail

On-Prem Security Benchmarking

1 post · Aug 2025

What this trail covers

This post details the evolution of Palantir's on-premises security capabilities, introducing 'Insight' for host-level benchmarking against rigorous security standards. Insight is a Go binary that performs modular checks on Linux hosts, going beyond industry benchmarks like DISA STIGs and CIS. The results are ingested into Palantir Foundry, forming an 'Insight Ontology' with objects for Host, Scan Report, Check, and Result. This enables collaborative reviews in a dedicated Workshop application, f

All Palantir trails
  1. Scaling On-Prem Security at PalantirThis post introduces Palantir Insight, a Go binary for host-level security benchmarking on-premises, extending beyond industry standards like DISA STIGs and CIS. It details the 'Insight Ontology' within Palantir Foundry, which models hosts, scan reports, checks, and results from Insight's JSON output. The post also describes a dedicated Foundry Workshop application for collaborative reviews and the use of a Build Questionnaire to capture deployment context. For air-gapped environments, it highlights the packaging of the Workshop application as a Foundry Marketplace bundle and the exposure of compliance metrics via standardized observability tooling. Finally, it touches on Apollo's role in automating the deployment and remediation of Insight checks.