remediation-verifier

Verify CVE remediation by querying Lightspeed vulnerability status, checking installed packages for updated versions, and confirming critical services are running normally across targeted hosts to produce a structured verification result.

CVE remediation verification validates updated package versions on target hosts and confirms that critical services are running normally, providing end-to-end confirmation that the vulnerability resolution is fully effective.

Yes, you can run standalone verification in ongoing vulnerability management workflows to check CVE remediation status, or apply it after remediation playbooks to confirm vulnerability resolution across systems.

Remediation verification integrates with the sre-agents:remediator agent by using MCP tools including get_cve, get_cve_systems, and get_host_details to query Lightspeed records and produce a structured confirmation of CVE resolution.

The best way to confirm CVE resolution after remediation playbooks is to run automated verification that queries Lightspeed for CVE records, validates fixed package versions, and checks service health to generate a consolidated report.

CVE remediation requires automated verification because manual checks are hard to trust; automated end-to-end confirmation validates vulnerability status, installed package updates, and service health across targeted systems reliably.