Unlock the Full Potential of Microsoft Endpoint Management
The governance, compliance, and intelligence layer your Microsoft endpoint stack needs — policy version control, security baseline scoring with actual evidence, historical compliance and configuration trending, a curated 600+ app catalog for deployment and updates with real-time CVE intelligence, and update approval workflows that test before they deploy.
Three Management Planes. One Console.
Extend Microsoft Intune and Azure Update Manager — or manage endpoints independently. Your devices, your way.
Microsoft Intune
Full governance layer — policy version control with diff, silent change detection, baseline drift analysis, historical compliance trending, and complete change audit trails.
CloudAzure Update Manager
Comprehensive update visibility, compliance reporting, and automation for Azure VMs and Arc-connected machines across hybrid environments.
Cloud HybridManaged Devices
Cross-platform management for Windows, macOS, and Linux. Full inventory, automation, patching, and reporting — no Microsoft dependency required.
On-Prem SaaS Air-GappedComplete Endpoint Intelligence for the Microsoft Stack
The complete endpoint intelligence platform — built, shipping, and ready to deploy today. Explore the full platform →
Intune Policy Governance
Policy version management with side-by-side diff. Extended change detection that captures every modification, including silent script changes. Baseline drift detection. Per-setting historical compliance trending over 30, 90, 180, and 365 days. Complete change audit trail with actor attribution.
Git-diff for Intune policiesSecurity & Compliance Baselines
12+ compliance baselines — CIS Benchmarks, Microsoft SCT, and custom baselines you create by cloning or snapshotting a configured device as a gold standard. Per-rule evidence with actual endpoint values, not just Intune's applied status.
12+ baselines • 3 platforms • Actual evidenceCVE Exposure & App Intelligence
Application Vulnerability Hub correlating installed software with CVE data from NVD, MSRC, OVAL, and OSV feeds. Risk badges (Exploited, Critical, CVE Risk), CVSS scores, installed vs. available versions, and per-device drill-down to see exactly what's vulnerable.
600+ apps • 24-hour security SLA • Exploited CVE alertingDeep Device Intelligence
Resource Explorer with 18 categories per device: processes with network connections, remote registry browsing, firewall rules and settings, Hyper-V guest inventory, software inventory by user and system scope, certificates, services, and more.
500 data views • 18 categories • Complete device pictureBuilt-In BI & Reporting
Three report designers — Dashboard, Tabular, and Change Timeline — with a Visual Query Builder, Monaco SQL editor, and WYSIWYG drag-and-drop canvas. Build any report against 500 data views without Power BI, SSRS, or Grafana.
3 designers • Visual Query Builder • Report WorkspacesChange & Drift Visibility
Policy Change Timeline, Script Change Activity, Baseline Drift Detection with snapshot comparison and inline diff. Know who changed what, when, and whether it drifted from your approved baseline — across policies, configurations, and scripts.
Version control • Drift detection • Actor attributionCurated Software Supply Chain
600+ enterprise apps with signature verification, malware scanning, and installation validation. Hardened winget fork (pbget) requiring signed content. From vendor release to your environment in under 24 hours — curated, not community.
Signed packages • Automated testing • 24-hour SLARelease Management & Automation
Update approval workflows with ring-based deployment and automated VM testing. Validation gates — boot checks, event log analysis, health signals — gate promotion to production. Pre/post scripts with signature enforcement. Planning mode. 125+ automation tasks with calendar scheduling across 3 platforms.
Update approval workflows • Ring deployment • VM test automationSee Patchblox in Action
See the governance, visibility, and intelligence that completes your Microsoft investment
Security Baseline Scoring
CIS benchmark compliance scored across 321 rules and 13 sections — with per-device pass/fail, severity breakdown, and per-rule evidence showing expected vs actual.
Application Vulnerability Hub
CVE exposure scoring across 600+ apps with risk badges, CVSS scores, and per-device remediation tracking.
Built-In BI Dashboard Designer
WYSIWYG drag-and-drop canvas with Visual Query Builder. Build any report against 500 endpoint data views.
Resource Explorer
18 categories per device — system overview, pending updates, available packages, and deep drill-down into every aspect of the endpoint.
Why Patchblox is Different
We don't just redistribute software. We govern, validate, secure, and illuminate your entire endpoint estate.
Governance, Not Just Patching
Policy version control with diff. Silent change detection. Baseline drift analysis. Script change auditing. We catch the changes Microsoft's own logs miss and give you the audit trail compliance demands.
Curated, Not Community
Public winget: 10,000+ packages, no guarantees. Patchblox: 600+ enterprise apps with signature verification, malware scanning, and installation validation. From vendor release to your catalog in under 24 hours.
Intelligence Built-In
Application Vulnerability Hub with CVE correlation from NVD, MSRC, OVAL, and OSV feeds. CIS Scorecard with 247 rules. Patch latency analysis. You don't just deploy updates — you understand your risk posture.
Visibility That Completes the Picture
500 endpoint data views. 18 categories per device in Resource Explorer. Process-level network connections. Remote registry browsing. Firewall rule enumeration. The deep device intelligence that extends your Microsoft investment.
Microsoft-Native — Or Standalone
Deploy through Intune, leverage Azure Update Manager, use your existing infrastructure. Or deploy independently — no Microsoft dependency required. We extend your investment or work on our own.
Your Reports, Your Way
Three built-in report designers with a Visual Query Builder and Monaco SQL editor. Build any dashboard or report against 500 data views. No Power BI license. No SSRS infrastructure. No external tools.
Your Infrastructure, Your Rules
Same powerful platform. You choose where it runs.
SaaS — We Host Everything
Deploy in minutes. Zero infrastructure overhead. 99.9% uptime SLA. We manage the platform — you manage your endpoints.
Self-Hosted — You Control Everything
Deploy in your data center, private cloud, or air-gapped environment. Full data sovereignty. Meets strict compliance requirements.
Ready to Complete Your Microsoft Endpoint Stack?
See what your Intune and Azure Update Manager environment looks like with full governance, visibility, and intelligence.