It will let you write policies which are applied each time it runs. If you schedule it to run hourly it will do the same kind of work as puppet/cfengine/chef would do - providing you write the appropriate policies.

For my own hosts it does _everything_, from installing packages, applying security updates, and tweaking configuration files.