Customer story

An insurance claims arbitration provider moves off Chef to commercially supported Ansible with Ascender Pro

A $50M+ nonprofit that resolves claims disputes for the insurance industry, handling almost $27 billion in member claims filings a year, replaced Chef with Ascender Pro and now runs event-driven remediation, audit-ready reporting, and hybrid on-premises and cloud coverage across a 650-node environment.

Ascender Pro

650

Nodes under management

Across on-premises and cloud infrastructure

1

Control plane

One automation layer across on-premises and Azure

24/7

Premium support

With a monthly release cadence

2026

Chef Infra Server end of life

The November deadline this move gets ahead of

At a glance

The environment, the deadline, and why Ascender Pro

How an insurance industry claims arbitration provider moved 650 nodes of configuration management onto a supported Ansible platform.

Who
A $50M+ nonprofit arbitration and subrogation services provider whose thousands of insurance industry member companies filed almost $27 billion in claims in 2025
What they run
Hybrid on-premises and cloud infrastructure, including Microsoft Azure and an Ubuntu footprint, across 650 nodes
What’s on it
Ascender Pro with Ascender Ledger, CIQ’s commercially supported Ansible-based automation platform
What it replaced
Chef, ahead of the Chef Infra Server open source end of life in November 2026
Why Ascender Pro
Event-driven remediation, an audit trail built for compliance reporting, and one control plane across on-premises and cloud, backed by 24/7 support

The customer

This customer is a $50M+ nonprofit that resolves claims disputes for the insurance industry, serving thousands of member companies whose filings totaled almost $27 billion in 2025. Automation reliability underpins a member-facing service that insurers depend on.

A small internal team runs configuration management and automation for the fleet, working alongside an outside implementation partner, so the tooling has to give a lean team broad reach and clear control over what runs where.

The decision

The team ran Chef for configuration management. Over time it saw support quality and update cadence decline, and felt it directly every time a renewal came up. With the open source Chef Infra Server set to reach end of life in November 2026, and no new code, features, or security fixes contributed after the end of October 2026, the team decided to move its configuration management to Ansible on a supported platform while it still controlled the timing, rather than migrating under deadline pressure.

The search started with the open source Ascender project. The team found Ascender while looking for an Ansible-based automation hub, downloaded the open source version, and ran it in production on its own before ever talking to CIQ. When it evaluated the commercial options, it weighed self-managing the open source Ansible tooling against a platform with a commercial support model behind it. A lean team responsible for a mission-critical service chose the supported platform.

Why Ascender Pro

Three capabilities drove the decision. Ascender Pro adds role-based access, single sign-on, credential management, and audit logging to the open source foundation the team already knew, backed by premium 24/7 support and a monthly release cadence, with hotfixes for major CVEs.

Event-driven automation.

Alerts trigger on defined conditions, with automatic remediation in response. The team can query Ascender Ledger for a specific CVE, identify every affected host and package, and run a playbook that updates only those packages on the day the CVE is identified. Ascender Ledger records automation-driven changes as they happen, so the audit trail builds itself.

Hybrid on-premises and cloud deployment.

Ascender Pro deploys across the team’s on-premises footprint and its cloud infrastructure, including Microsoft Azure. The same playbooks, the same reporting, and the same access controls apply no matter where a workload runs.

Multi-OS coverage, including Ubuntu.

Ascender Pro manages the team’s mixed operating systems from a single platform, and CIQ is extending Ascender Ledger reporting to cover Ubuntu errata.

The rollout

The team started from its existing open source Ascender instance and upgraded in place by adding the Ascender Pro components, following the upgrade guide in CIQ’s documentation. CIQ provisioned the team in the CIQ portal for support tickets and repository access, granted the customer’s leads administrator rights, and opened a shared Slack channel for quick installation questions alongside the formal ticket queue. CIQ scheduled weekly syncs for the first month of operation.

The engineer who led the evaluation and drove the decision runs the platform day to day with his team. On the first onboarding call after purchase, he told CIQ the team expected to complete the conversion to Ascender Pro within the week.

The result

The customer runs production automation with the controls and the support model its claims operation requires. The team operates one control plane across on-premises and cloud systems, with role-based access and an audit trail its auditors can rely on, and it has moved from scheduled bulk patching to targeted CVE remediation, all on a supported open source foundation.

Why this matters beyond one team

Targeted remediation, not bulk patching.

Query a specific CVE, find every affected host and package, and patch only those, instead of running scheduled sweeps across the whole fleet.

One control plane, hybrid environment.

A single automation layer covers on-premises infrastructure and cloud, including Azure, rather than splitting management across separate tools.

An audit trail built in, not bolted on.

Automation-driven changes are recorded as they happen, giving compliance and audit teams the trail they need without a separate reporting project.

Off end-of-life tooling on your own timeline.

Starting before the deadline forced the issue gave the team room to evaluate, test, and roll out Ascender Pro deliberately, well ahead of Chef Infra Server’s open source support running out.

Why CIQ

CIQ supports Ascender Pro commercially and contributes upstream to the open source Ascender project. The customer runs on an open source foundation with a vendor that develops the project it commercializes, backed by a support model built for production. Multiple vendors support Ansible-based automation. This team chose CIQ for the depth of that support and the automation and audit capabilities Ascender Pro adds.

Go deeper on Ascender Pro

Introducing Reaqt: self-healing automation for Ascender Pro

Introducing Reaqt: self-healing automation for Ascender Pro

Jul 15, 2026
Blog
The new Ascender Pro: Fixes what breaks, proves what happened

The new Ascender Pro: Fixes what breaks, proves what happened

Jul 9, 2026
Blog
Chef Infra Server EOL is November 2026: Your configuration management options

Chef Infra Server EOL is November 2026: Your configuration management options

Jun 24, 2026
Blog

Evaluate Ascender Pro for your environment

PRODUCT PAGE

Ascender Pro overview

The Ansible-based automation platform: control plane, event response, audit record, and content management in one supported product.

SERVICE

Request a migration assessment

Plan a move off end-of-life configuration management with CIQ’s migration team.

Talk to CIQ about Ascender Pro

See how an insurance claims arbitration provider moved off Chef ahead of its end-of-life deadline, and what event-driven remediation and audit-ready reporting look like on a 650-node hybrid environment.