> ## Content Index > Fetch the complete content index at: https://www.stirup.si/llms.txt > Use this file to discover other available public pages before exploring further. # Red Hat Lightspeed On-Premise Vulnerability Management - URL: https://www.stirup.si/red-hat-lightspeed-on-premise-vulnerability-management-a4d00fdb/ - Published: 2026-10-13T11:12:49.000Z - Updated: 2026-10-13T11:12:49.000Z - Description: Red Hat Lightspeed provides on-premise tools for monitoring and remediating vulnerabilities without transmitting data outside the organization's network, enhancing security and compliance. - Author: Satish Das - Tags: Enterprise, News, Stirup Research ## Overview of Red Hat Lightspeed Capabilities Red Hat Lightspeed offers on-premise capabilities that enable organizations to monitor vulnerabilities and apply remediations without transmitting system data outside their network. This solution enhances situational awareness by helping administrators discover, prioritize, and address security issues within their infrastructure. As outlined in a blog post by Štefan Németh and Brian Moore, Lightspeed provides tools to manage vulnerabilities across Red Hat Enterprise Linux (RHEL) systems effectively. The on-premise deployment ensures data remains within the organization's environment, aligning with privacy and compliance requirements. By leveraging Lightspeed’s advisor remediations, teams can automate responses to identified risks, improving overall security posture. This approach supports continuous monitoring and proactive management of potential threats, making it a valuable tool for enterprises focused on maintaining secure, on-premise operations. ## Managing System Health and Vulnerabilities Managing system health and vulnerabilities using on-premise Red Hat Lightspeed capabilities involves leveraging centralized dashboards and actionable insights. Within Red Hat Satellite, the recommendations page under the Red Hat Lightspeed tab serves as a proactive hub for managing the health of your systems. The primary benefit is the "total risk" visualization, which helps assess the overall impact of potential issues across the entire fleet. Rather than manually managing spreadsheets of issues and related patches, teams can view all vulnerabilities in a single dashboard, categorized by exploit availability and severity. This enables prioritization of the highest risk issues, ensuring efficient and targeted remediation efforts. ## Integration and Workflow Enhancements Integration and Workflow Enhancements in Red Hat Lightspeed focus on streamlining operations by aligning with existing workflows rather than introducing additional complexity. As noted, Red Hat Lightspeed acts as an intelligent layer that surfaces high-priority insights directly within the environments where decision-makers are already working, enhancing the existing toolset without overwhelming users with extra tools or processes \[[Red Hat](https://www.redhat.com/en/blog/using-premise-red-hat-lightspeed-capabilities-monitor-vulnerabilities-and-apply-advisor-remediations?ref=stirup.si)\]. The platform centralizes discovery, prioritization, and remediation, transforming the operational lifecycle into a more streamlined workflow \[[Red Hat](https://www.redhat.com/en/blog/using-premise-red-hat-lightspeed-capabilities-monitor-vulnerabilities-and-apply-advisor-remediations?ref=stirup.si)\]. This approach supports both proactive measures, such as addressing potential upgrade blockers, and reactive actions, like triaging critical CVEs with clear business context, ensuring visibility and agility that contribute to a more secure and stable environment \[[Red Hat](https://www.redhat.com/en/blog/using-premise-red-hat-lightspeed-capabilities-monitor-vulnerabilities-and-apply-advisor-remediations?ref=stirup.si)\]. ## Authentication and Permissions for Red Hat Lightspeed Authentication and permissions are critical components of using on-premise Red Hat Lightspeed capabilities to monitor vulnerabilities and apply advisor remediations. Red Hat Lightspeed supports JWT Bearer Token authentication, which requires providing a pre-existing JWT token via the `Authorization: Bearer ` HTTP header, applicable only for SSE/HTTP transports ([github.com](https://github.com/redhatinsights/insights-mcp?ref=stirup.si)).Each toolset within Red Hat Lightspeed requires specific roles for a service account to function properly. For example, Advisor tools require the `RHEL Advisor viewer` and `Inventory Hosts viewer` roles, while Remediation tools require the `Remediations user` role ([github.com](https://github.com/redhatinsights/insights-mcp?ref=stirup.si)). These role names are displayed in the Hybrid Cloud Console User Access interface. It is important to note that the MCP server will only be able to perform tasks for which it has been granted explicit permissions ([github.com](https://github.com/redhatinsights/insights-mcp?ref=stirup.si)). ## Setup and Usage of Red Hat Lightspeed Setting up Red Hat Lightspeed involves integrating the MCP (Management Console Proxy) API through containerized execution using podman. Users must first navigate to the Add custom extension modal and input specific parameters, including the extension type, ID, name, and description. The command provided utilizes podman to run the `red-hat-lightspeed-mcp` container image from the Red Hat Insights GitHub Container Registry, passing environment variables for authentication. These variables—`LIGHTSPEED_CLIENT_ID` and `LIGHTSPEED_CLIENT_SECRET`—must be configured separately. The timeout is set to a default of 300 seconds unless modified. For generic integration via STDIO, the same podman command applies, emphasizing that the MCP API is accessed through standard input rather than a chat interface. This setup enables on-premise monitoring of vulnerabilities and application of advisor remediations, aligning with Red Hat's approach to containerized security tools. ## Sources and reporting notes - [Red Hat](https://www.redhat.com/en/blog/using-premise-red-hat-lightspeed-capabilities-monitor-vulnerabilities-and-apply-advisor-remediations?ref=stirup.si) - [123zhuan.com](https://www.123zhuan.com/article/2578438?ref=stirup.si) - [github.com](https://github.com/redhatinsights/insights-mcp?ref=stirup.si) - [fortinet.com](https://www.fortinet.com/partners/partnerships/alliance-partners?ref=stirup.si) Based on published source material. No independent hands-on testing is claimed.