Using Pure1 AI Copilot to Assess CVE Exposure and Get Upgrade Recommendations

Fleet Security Assessment

The Pure1 Fleet Security Assessment provides a fleet-wide view of the security posture of FlashArray and FlashBlade systems by correlating each asset's current software version against Everpure's curated CVE database.

Determine whether an asset is exposed to a known CVE

A storage administrator can:

1. Log into Pure1.
2. Navigate to Fleet Security Assessment.
3. View all registered arrays within the fleet.
4. For each array, Pure1 automatically identifies:
• Current Purity version
• Product family (FlashArray / FlashBlade)
• Array Name
• Array ID
• Serial Number
5. Pure1 compares the running Purity version against the Everpure Product Security Advisory database and determines:
• Whether the version is affected by known CVEs.
• Severity of each vulnerability (Critical, High, Medium, Low).
• Whether a fix is available.
• Whether a workaround exists.
• Whether the CVE affects the customer's specific product.

Selecting an individual array allows the administrator to review:

• CVE ID
• CVSS Score
• Severity
• Description
• Affected component
• Security Bulletin
• Fixed version
• Mitigation guidance

This enables administrators to quickly prioritize remediation activities based on risk across their entire storage estate.

Using AI Copilot

AI Copilot provides a conversational interface to the same security intelligence, allowing administrators to ask questions in natural language rather than navigating multiple dashboards.

Examples include:  "Is array FA-01 exposed to any critical security vulnerabilities?"

Another example:  "Which arrays in my fleet are exposed to critical CVEs?"

Administrators could also ask:  "Show me every FlashBlade affected by OpenSSH vulnerabilities." or "Which arrays are running unsupported Purity versions?"

 

Intelligent Upgrade Recommendations

Rather than simply identifying vulnerable arrays, AI Copilot can also recommend an upgrade.

AI Copilot will go beyond security and determine whether the array is actually ready for upgrade.

Example prompt:  "Can I safely upgrade FA-01 to Purity 6.9.4?"

 

AI evaluates:  

• Hardware compatibility
• Controller generation
• Installed DirectFlash modules
• Current Purity version
• Intermediate upgrade requirements
• Known upgrade restrictions
• Health status
• Replication configuration
• SafeMode
• Supportability
• Current alerts
• Capacity utilization
• Pending hardware failures
• Replication synchronization
• Outstanding upgrade blockers

And determines the most appropriate version based on the customer's environment based on customer’s 

• Current Purity version
• Current LLR
• Current ER
• Security vulnerabilities
• Feature requirements
• Hardware support
• Known software defects
• Current advisories
• Upgrade path complexity
• Engineering recommendations
• Customer support policy

Example:

Users could ask:  "What version should I upgrade to?"

Fleet-wide Upgrade Planning

AI could also answer strategic questions such as:  "Show every array requiring a security upgrade."or "Which arrays should be upgraded in the next 30 days?"

 

Conclusion 

The integration of Pure1 Fleet Security Assessment and AI Copilot fundamentally transforms storage security management from a reactive, manual task into a proactive, data-driven strategy. By providing deep visibility into CVE exposure across the entire fleet and delivering intelligent, context-aware Purity upgrade recommendations, Pure1 empowers administrators to mitigate risks before they can be exploited. This shift to strategic fleet planning ensures that storage environments remain resilient, compliant, and optimized, allowing organizations to focus on innovation rather than crisis management.