TridentStack Control is a patch and vulnerability management platform for Windows, Linux, and macOS endpoints, delivered as cloud-hosted software with an agent installed on each managed device. Administrators organize devices using tags rather than direct assignment, then apply update policies, application deployments, and configuration baselines, including Windows ADMX-based policies, to those tag groups. The platform identifies available operating system and third-party application updates, compares them against each endpoint's installed software, and deploys them through configurable rollout rings that stage releases across groups of devices and halt automatically if endpoints fail to reconnect or report errors. It scans managed endpoints for known vulnerabilities by matching installed software against CVE data from sources such as NVD and OSV, and reports each finding with its severity and known-exploited status. It also evaluates endpoint configuration against security hardening benchmarks, including CIS Benchmarks, DISA STIGs, and Microsoft Security Baselines, and produces a per-endpoint compliance score. Additional capabilities include a weighted endpoint health score, centralized history and reporting of update and remediation activity, and a self-hosted relay for managing devices on segmented networks.
