Explore Patch Manager Plus features

One console to patch Windows, Mac, Linux, and over 1,100 third-party apps.

Automated Patch Deployment

Automate the entire patch management process, from scanning and assessment to testing, deployment and reporting.

Automated scanning and detection

Real-time scanning detects missing patches and software vulnerabilities across every endpoint.

Learn more

End-to-end automation

Scanning, downloading, testing, approval and deployment run as one hands-free pipeline.

Learn more

Risk-based prioritization

Deploy critical, actively exploited patches first, and batch the lower-priority ones.

Learn more

No manual dependencies or errors

Remove the redundant, error-prone task of deploying patches to hundreds of systems by hand.

Learn more

Patch reliability score

Review a reliability indicator for each patch to make more informed deployment decisions.

Learn more

Cross-platform patching

Handle every aspect of Windows, Mac and Linux patch management from a single console.

Windows patch management

Automate the entire Windows patching process, with a standalone WSUS alternative that pulls straight from Microsoft.

Learn more

Mac patch management

Keep macOS endpoints current with the latest OS and application security updates.

Learn more

Linux patch management

Deploy security fixes, kernel patches and updates across major Linux distributions.

Learn more

Third-party applications patching

Keep non-Microsoft software and antivirus definitions current, right alongside your OS patches.

Third-party applications

Manage and deploy patches for over 1,100+ third-party applications such as Adobe, Java and WinRAR.

Learn more

Antivirus definition updates

Automate antivirus and definition-database updates for Windows Defender, McAfee and other AV software.

Learn more

Windows feature update deployment

Deploy major Windows feature updates as easily as any other patch, scheduled to non-production hours to reduce downtime and disruption.

Windows 10

Deploy the latest Windows 10 feature update without compromising on productivity.

Learn more

Windows 11

Upgrade eligible devices to Windows 11 and deploy its feature packs across your network.

Learn more

Customize your patch deployment

Tailor how and when patches install, and control exactly what happens before and after deployment.

Flexible deployment policies

Create deployment policies that specify installation and reboot options for patches, software and service packs, tailored to your enterprise.

Learn more

Pre and post-deployment settings

Run custom scripts before a patch is applied, then control reboot, shutdown and notification behavior afterwards.

Learn more

Test, approve & control patches

Decide exactly which patches reach your network: test and approve the good ones, decline the rest, and manage superseded versions.

Test and approve patches

Test patches on a small group of computers, then approve them automatically or manually for the wider network.

Learn more

Decline patches

Decline patches for legacy applications or roll back faulty ones; declined patches are excluded from deployment and system health.

Learn more

Superseded patches

Deploy older, stable patch versions when needed; superseded patches stay available for sequential server patching and N-1 rollouts.

Learn more

Self Service Portal

Let users install IT-approved patches at their own convenience, reducing IT overhead.

User-driven installation

Users and server owners decide when to install IT-approved patches, based on their own requirements.

Learn more

Admin-published patches

Admins publish selected patches to the portal from manual or automated deployment.

Learn more

Patch outside the deployment window

Users can install published patches even before a scheduled deployment date.

Learn more

Server Patch Management

Deploy OS and third-party application updates to your servers, to enhance server security and performance.

OS and application server updates

Deploy both operating system and third-party application updates to your servers.

Learn more

Automated server patching

Scan, download, test and deploy missing server patches automatically.

Learn more

Test on virtual servers

Server application patches are tested on virtual servers before rolling out to production.

Learn more

Control server reboots

Exclude servers from reboot to manage their criticality and protect uptime.

Learn more

Reduce server downtime

Optimize server performance while keeping downtime to a minimum.

Learn more

Ensure Patch Compliance

Reach a compliant state and evidence it against the regulatory frameworks your organization is held to.

Achieve compliant status

Reach a fully patched, compliant status across all your managed endpoints.

Learn more

Automatic remediation

Bring non-compliant endpoints back into compliance automatically, with every action logged for your records.

Learn more

Define system health policy

Set the standards that identify whether a system is compliant.

Learn more

Detect vulnerable systems in real-time

Detect all vulnerable systems in the network and deploy the right patch fixes.

Learn more

Patch Management Reports

Turn patch data into decisions with flexible, shareable reporting across all your managed endpoints.

Greater visibility into every endpoint

See the patch compliance and patch status of all your managed endpoints.

Learn more

Filter and share in any format

Run comprehensive reports, filter the data, and share results in a variety of formats.

Learn more

One-click and scheduled reports

Generate reports on demand, or schedule them to your business needs.

Learn more

Automatic email notifications

Push important compliance and status data to respective stakeholders automatically.

Learn more

Executive-ready reporting

Use real-time dashboards and audits to communicate risk and report progress to executives.

Learn more

Mobile app for patching

Manage patching on the go with the Patch Manager Plus app for iOS and Android.

iOS and Android apps

Now easily patch from your phone with the Patch Manager Plus app for iOS and Android.

Learn more

Monitor patch status

Monitor patch status and system health wherever you are.

Learn more

Approve deployments

Approve patch deployments remotely, without being at your desk.

Learn more

Test, approve or decline

Test and approve patches automatically, or decline them, from the app.

Learn more

Review compliance reports

Review compliance reports on the move.

Learn more

Remote patching & Distribution Servers

Patch your remote and work-from-home endpoints without a VPN.

Remote workers

Patch work-from-home endpoints swiftly, with no VPN required.

Learn more

Roaming users

Patch machines used by roaming users through the server public IP address.

Learn more

Distribution Servers

Replicate patch binaries locally at remote offices, so WAN agents pull them within the office LAN and save bandwidth.

Learn more

DMZ / closed network

Patch machines in a closed network such as a demilitarized zone (DMZ).

Learn more

Integrations

Integrate Patch Manager Plus with your security and service tools for a seamless patch management and vulnerability mitigation experience.

Tenable Vulnerability Management

Vulnerability detection and patch management on a unified cloud console.

Learn more

Tenable Security Center

Vulnerability detection and mitigation in on-prem and hybrid environments.

Learn more

Rapid7 InsightVM

Detect, prioritize, and remediate endpoint vulnerabilities.

Learn more

CrowdStrike Falcon Spotlight

Assess and remediate endpoint vulnerabilities.

Learn more

ManageEngine ServiceDesk Plus

Manage your endpoints without missing a single SLA.

Learn more

ManageEngine Analytics Plus

Obtain out-of-the-box analytics for your managed devices.

Learn more

ManageEngine AssetExplorer

Enhance visibility over your IT assets.

Learn more

Syslog

Forward audit logs to your SIEM tool.

Learn more

Qualys

Address Qualys-detected vulnerabilities by deploying the matching patches from a single console.

Learn more