I'm looking for reliable software patch management solutions specifically for third-party applications that are user-friendly and comply with security standards like ISO27001, NIST, or Cyber Essentials in the UK. We currently utilize Qualys for scanning and Kaseya RMM, which works fine, but I'm exploring Qualys's patching product as well. I also have Datto's patch management for some clients, but it only covers Windows and isn't very effective. Ideally, I'd like a solution that can efficiently patch thousands of endpoints within 14 days of a critical CVE being disclosed. Any recommendations?
5 Answers
Is Chocolatey still relevant for third-party app patching? I used it in the past and found it pretty solid. I'm in the same boat as you, so I'm keen on what others suggest too!
I recommend Microsoft Configuration Manager combined with PatchMyPC Enterprise. Their patch catalog is excellent and keeps expanding. Plus, it auto-generates installation objects, ensuring users always have the latest apps when installing from Software Center. It’s all automated, and I get everything up-to-date nightly!
We use Action1 for patching both Windows and third-party applications. They offer a broad library of supported apps out of the box and allow for adding your own. It's easy to set up, works well, and you can manage up to 200 endpoints for free. Definitely worth a look!
We recently switched from PDQ Deploy on-prem to the cloud-based PDQ Connect. It’s worked great so far, allowing us to patch any online endpoint seamlessly. The automation features and CVE patching capabilities for many apps are impressive!
Ansible/AWX is my tool of choice for patching operating systems and third-party apps. It’s efficient and integrates well into our existing setup.
Thanks, I’ll check this out!