Best Patch Management Software - Page 6

Ivanti Patch for Configuration Manager

Ivanti Patch for Configuration Manager simplifies and automates the process of discovering, publishing, and deploying third-party and Microsoft application, security, and operating system updates, all from the familiar Configuration Manager console. Installed as a native plugin, it eliminates the need for additional infrastructure or complex workflows, enabling advanced patching capabilities that Microsoft does not provide. Keep your environment secure and up-to-date—even for difficult apps like Java and Google Chrome—while saving valuable time to focus on core business goals.

Ivanti Patch for Endpoint Manager

Ivanti Patch for Endpoint Manager helps your enterprise consistently discover, assess, and remediate thousands of client systems based on policies you define and without saturating your network or disrupting user productivity. Patch for Endpoint Manager can swiftly detect vulnerabilities in Windows, Mac OS, Linux, and hundreds of third-party apps (Acrobat Flash/Reader, Java, Web browsers, and more) and deploy expertly pre-tested patches everywhere you need them.

KernelCare Live Patching

KernelCare Enterprise by TuxCare is a live patching service designed to enhance the security and stability of Linux systems by applying critical kernel updates without the need for system reboots or downtime. This solution ensures that servers remain operational while receiving timely security patches, thereby minimizing vulnerability windows and maintaining continuous service availability. Key Features and Functionality: - Automated Live Patching: KernelCare Enterprise automatically applies security patches to the running Linux kernel without requiring reboots, ensuring uninterrupted system operation. - Broad Distribution Support: The service supports a wide range of Linux distributions, including RHEL, CentOS, Ubuntu, Debian, and more, catering to diverse enterprise environments. - Extended Kernel Support: KernelCare provides live patches for each supported kernel as long as the vendor releases security updates for that series, offering prolonged protection without being tied to the vendor's release schedule. - ePortal Management: For organizations with specific patch deployment policies or air-gapped environments, KernelCare offers ePortal, an on-premises management server that allows for customized patch rollouts and full control over update schedules. - Add-On Services: KernelCare can be extended with additional services like LibCare for live patching of critical userspace components and QEMUCare for live patching of QEMU-based virtualization systems. Primary Value and Problem Solved: KernelCare Enterprise addresses the critical challenge of maintaining secure and up-to-date Linux systems without the operational disruptions caused by traditional patching methods that require reboots. By enabling live patching, it significantly reduces the time systems are exposed to vulnerabilities, enhances compliance with security standards, and eliminates the downtime associated with maintenance windows. This approach not only strengthens an organization's security posture but also optimizes resource utilization by reducing the need for scheduled outages and manual interventions.

LinuxPatch Patch Management

LinuxPatch.com offers a comprehensive and automated Linux patch management solution designed to simplify server updates and enhance security across various Linux distributions like Debian, Ubuntu, CentOS, and more. Key features include one-line installation for quick setup, AI-powered CVE reporting for proactive security, and Healthchecks for system monitoring. It supports seamless updates across multiple servers, offers a free plan for up to three servers, and is suitable for environments ranging from small startups to large enterprises. With transparent pricing and scalable solutions, LinuxPatch.com helps maintain system stability and security efficiently. For more details, visit LinuxPatch.com.

MetaDefender Endpoint

MetaDefender Endpoint™ is OPSWAT’s advanced endpoint protection solution for safeguarding endpoints from peripheral media–borne threats, monitoring device compliance, detecting vulnerabilities, enabling patching and enforcing endpoint security controls. Leveraging OPSWAT technologies such as Metascan™ Multiscanning, Deep CDR™, Proactive DLP™, and Country of Origin analysis, it helps organizations protect endpoints, monitor device security posture, and manage with centralized visibility.

neo42 Application Package Depot

neo42 Application Package Depot provides ready-to-use, pre-packaged standard applications for automated software deployment. It helps IT teams keep Windows applications up to date, secure, and efficiently distributed — including regular updates, validated PSADT packages, and integration with systems such as Microsoft Intune, Matrix42 Empirum, Omnissa Workspace ONE, and Microsoft ConfigMgr/SCCM. Its key benefits include high package quality, automated deployment, and significant time savings in application packaging and patch management.

OPSWAT Security Score

OPSWAT Security Score is an app that scores your cyber risk based on various factors such as OS updates, vulnerable applications, firewall, and malware protection, giving you a comprehensive and streamlined view of your current computer’s security score as well as how to improve it. Check your Security Score and fix security issues for free. 1. Download and Run OPSWAT Security Score without installation. 2. Get Your Security Score and Identify Risks 3. Fix Your Security Issues

PatrolServer

We detect your outdated software real-time and notify you with new software updates.

Robopack

Robopack is a cloud-based software solution designed to streamline and optimize third-party application patching and management for Microsoft Intune and Configuration Manager. It simplifies complex processes such as application packaging and patching. By automating manual processes, Robopack helps maintain operational efficiency and consistency across small and large-scale environments. With this solution, you can manage multiple Intune tenants, as it automates tasks like legacy installer conversions and application deployments. Robopack's application library, featuring over 40,000 always-updated packages, ensures organizations can access a catalog that supports diverse needs, including multi-language formats. The platform also offers tools for ensuring application security and stability, such as an automated package verification system that deploys only pre-tested applications, minimizing installation errors. Robopack enhances the user experience by allowing for customizable app settings. IT teams can create tailored deployments using script templates and detection rules, reducing the need for adjustments after deployment. Furthermore, the wave deployment feature automates the testing, documentation, and phased rollout processes, ensuring that updates are implemented smoothly with compliance checks at every step. With dynamic application customization, Robopack empowers IT teams to adjust package identifiers, create complex scripts, and set deployment parameters, making it suitable for even the most complex IT environments. Its proactive monitoring and analytics capabilities provide real-time insights, enabling teams to predict and resolve issues before they impact operations. Robopack’s cloud-based convenience means no installation is required, and its secure, user-friendly platform allows for efficient resource allocation and simplified management. This makes it a powerful tool for automating compliance, enhancing system integrity, and supporting large-scale deployments with minimal manual effort.

SecTeer

CATCH & PATCH: At SecTeer we help organizations secure and update their endpoints efficiently and proactively. With VulnDetect and Patch Pro, we provide a complete endpoint security solution — from identifying and prioritizing vulnerabilities with precise, real-time data to seamlessly patching both standard and third-party applications, all without disrupting end users. Founded by IT Security industry veterans, SecTeer's mission is to help IT Security professionals and IT operations personnel across industries uphold and maintain a more secure network, to repel the rising threats from a multitude of criminals. As a team, we breathe IT Security and obsess over how to protect our customers and community by leveraging the best talent & technology the market has to offer. Stay up to date with all our latest news, blog posts, and details of our upcoming product that is in the works, contact us and we will keep you updated.

SnaPatch

SnaPatch is an add-on that utilises Microsofts System Centre Configuration Manager (SCCM) to patch users' virtual server fleets.

SysWard

You can upgrade or cancel instantly, any time - all from within your dashboard.

TeamViewer ONE

TeamViewer ONE enables lean IT teams to shift from reactive support to proactive device management with a single platform that combines remote access, intelligent automation, experience monitoring, and endpoint management. With built-in security and automation, IT teams can resolve problems faster, support hybrid work confidently, and deliver exceptional digital experiences. AI is transforming IT management, empowering even small teams to deliver enterprise-level impact. By automating repetitive tasks, accelerating diagnostics, and enabling predictive insights, AI reduces time to resolution from hours to minutes and frees IT to focus on strategic priorities. With TeamViewer ONE, we combine remote connectivity, endpoint management, and Digital Employee Experience — all powered by AI for maximized value

Average Rating: 4.4/5.0

Total Reviews: 9

TridentStack Control

TridentStack Control is a patch and vulnerability management platform for Windows, Linux, and macOS endpoints, delivered as cloud-hosted software with an agent installed on each managed device. Administrators organize devices using tags rather than direct assignment, then apply update policies, application deployments, and configuration baselines, including Windows ADMX-based policies, to those tag groups. The platform identifies available operating system and third-party application updates, compares them against each endpoint's installed software, and deploys them through configurable rollout rings that stage releases across groups of devices and halt automatically if endpoints fail to reconnect or report errors. It scans managed endpoints for known vulnerabilities by matching installed software against CVE data from sources such as NVD and OSV, and reports each finding with its severity and known-exploited status. It also evaluates endpoint configuration against security hardening benchmarks, including CIS Benchmarks, DISA STIGs, and Microsoft Security Baselines, and produces a per-endpoint compliance score. Additional capabilities include a weighted endpoint health score, centralized history and reporting of update and remediation activity, and a self-hosted relay for managing devices on segmented networks.

VDCF

VDCF is a platform management framework for the Solaris Operating System. VDCF allows to deploy, patch, operate, migrate, secure and monitor a virtualized data center based on Solaris 10 and 11 Zones (Containers) and/or Logical Domains controlled by a centralized management server. Using VDCF you can easily combine both virtualization technologies to get the most flexibility and benefit for your agile Enterprise Grade Private Cloud environment.