Home › Services › Patch Management
Productized security
The vulnerability that gets exploited is almost always one with a patch available.
Attackers overwhelmingly use known vulnerabilities with published fixes, not novel exploits. The gap between a patch existing and a patch being installed is where most breaches live — and on unmanaged estates that gap is measured in months.
Included from the tier shown below. Month to month, cancel any time.
What we actually do
Operating system patching on a schedule
Deployed in rings so updates land on test machines before they land on everyone, with maintenance windows that fit how you actually work.
Third-party application patching
Browsers, PDF readers, Java, conferencing tools, and the rest. These are attacked more often than Windows itself and are almost never patched on unmanaged estates.
Firmware and driver updates
Where they matter for security, applied with the same care and the same rollback plan.
Exception handling
Some line-of-business software breaks on a specific update. We track those exceptions deliberately and revisit them, rather than turning patching off and forgetting.
Reporting you can show an auditor
Patch compliance per device, what failed, what is pending, and why.
Which package includes it
| Package | Patch Management |
|---|---|
| Monitor | Included |
| Protect | Included |
| Resist 365 | Included |
| Complete | Included |
Common questions
Will updates reboot machines during the workday?
Not on our standard configuration. Reboots are scheduled, users get warning, and deferrals are limited so a machine cannot be postponed indefinitely.
What if a patch breaks something?
Ring deployment means it breaks on a small number of test machines first. We hold the rollout, investigate, and remediate before it reaches everyone.
How fast do critical patches go out?
Faster than the standard ring schedule, on a documented emergency path. What counts as an emergency is defined in your service agreement rather than judged in the moment.
Ready when you are.
Every package includes this. Pick the tier that fits.