Scaling On-Prem Security at Palantir

This post introduces Palantir Insight, a Go binary for host-level security benchmarking on-premises, extending beyond industry standards like DISA STIGs and CIS. It details the 'Insight Ontology' within Palantir Foundry, which models hosts, scan reports, checks, and results from Insight's JSON output. The post also describes a dedicated Foundry Workshop application for collaborative reviews and the use of a Build Questionnaire to capture deployment context. For air-gapped environments, it highlights the packaging of the Workshop application as a Foundry Marketplace bundle and the exposure of compliance metrics via standardized observability tooling. Finally, it touches on Apollo's role in automating the deployment and remediation of Insight checks.