Patch Management
Scheduled, tested updates for operating systems and applications.
Unpatched software is the most common way attackers get in. We track vendor releases, test updates against your environment and roll them out in maintenance windows that suit your business.
Patching covers more than Windows. Browsers, PDF readers, Java, accounting packages and the other third-party apps on every machine are tracked and updated too, because those are where many attacks start.
Every month you get a report showing what was patched, what was deferred and why, so compliance questions and insurance forms have a ready answer.
Scheduled windows
Updates land outside business hours, with a rollback plan ready.
Third-party coverage
Browsers, PDF readers and business apps, not just Windows.
Tested first
Updates go to a pilot group before the rest of the business.
Server patching
Servers updated in planned windows with health checks after reboot.
Emergency patches
Critical vulnerabilities fixed fast, outside the normal schedule.
Monthly reporting
A clear record of patch status for every device.
Signs you need this
- Staff click 'remind me later' on updates for weeks
- You don't know which machines are missing security updates
- An update once broke a key application and nobody has patched since
- Your cyber insurance form asks about patching and you're not sure what to say
How we deliver it
Inventory
We list every device and the software on it, and check what is out of date.
Catch up
Missing updates are applied in stages, starting with the most critical.
Schedule
Regular patch windows are agreed, with a pilot group tested first.
Report
Monthly reporting on what was patched, deferred and why.
Deliverables
- Full inventory of devices and installed software
- Agreed patch schedule and maintenance windows
- Operating system and third-party app updates
- Emergency patching for critical vulnerabilities
- Monthly patch compliance report
Tools we work with
- Microsoft Intune
- Windows Update for Business
- Remote monitoring and management (RMM)
- Azure Update Manager
Common questions
Will updates interrupt my staff during the day?
No. Updates install in agreed maintenance windows, usually overnight, and machines that were off catch up quietly when they next start.
What if an update breaks something?
Updates go to a small pilot group first. If a problem shows up, we pause the rollout and roll the update back on affected machines.
Do you patch Macs and servers as well?
Yes. Windows and Mac workstations, servers and supported third-party applications are all covered.
Ready for IT you don't have to think about?
Book a free consultation. We'll review your setup and give you a clear, fixed monthly price.