Capabilities
Everything Patchblox does, and what it adds to what you run
Choose what you run today and which devices you manage. Each view lists what Patchblox adds, and marks what works with the Patchblox agent alone.
With Azure Update Manager
Keep Update Manager for Azure VMs and Arc-enabled servers. Patchblox reads its compliance and adds what it doesn't do.
Microsoft details are from Microsoft's documentation as of November 2026.
Where Patchblox goes further
- A curated third-party catalog, no WSUS required. Update Manager installs third-party updates only after you publish them to WSUS, which Microsoft deprecated in September 2024.
- Rings with health gates. Update Manager has no phased deployment.
- Workflows that run in order: one starts when the last finishes with the success you require, and you can change the order. Update Manager runs each maintenance configuration on its own schedule.
- A second opinion: Patchblox's own assessment next to Update Manager's, with configuration risks.
- Windows 10 and 11 desktops in the same console. Update Manager covers server operating systems.
Vulnerability and posture
6Vulnerability Hub
Every open CVE, ranked by the fix that closes it: patch now for exploited ones (CISA KEV, MSRC and Apple), then urgent, high and routine, with EPSS, ransomware use and KEV due dates. Deploy the fix from the same row.
Monthly Releases
Every vendor's security releases this month, ranked the way Patch Radar ranks them, and how many of your devices each one reaches.
Security baselines
Industry Standard and DISA STIG for Windows, macOS and Linux, Microsoft SCT for Windows, and your own.
Gold standard from a device
Clone a baseline from a well-configured device, adopting its values for the rule results you choose, and measure the rest against it.
Evidence, rule by rule
Expected against actual for every rule on every device, read from the device and exportable to Excel, CSV and PDF.
Update configuration across the fleet
Which authority controls updates on each Windows device, with its deferrals, reboot policy and active hours, and for Linux and macOS, how recently each device scanned and its automatic update settings.
Intune and Microsoft governance
2Multiple Intune and Azure tenants
Every connected Entra tenant for Intune and Azure in one console, switched from any page.
Azure Update Manager compliance
Update Manager's assessment next to Patchblox's own for the same machines, with configuration risks such as patch orchestration and the Windows Update authority on Arc servers, plus run history, maintenance configurations and policy definitions.
Real-time operations
2Quick inventory
Fresh data from a device in under a minute.
Resource Explorer
Live data per device in up to 18 categories: processes and connections, firewall rules, certificates and the registry on Windows, keychain items and system extensions on macOS, systemd units and SELinux on Linux.
Reporting and notifications
4500+ data views
Across Windows, Linux and macOS, ready to report on.
Three report designers
Dashboards, tabular reports with a Visual Query Builder and SQL editor, and change detection timelines.
Scheduled reports
Run any report on a reusable schedule and keep every result as a snapshot: CSV for tabular reports, PDF for dashboards and business reports.
Report alerts
Get an alert when a scheduled report returns rows, on every run, or only when its results change, at the severity you set.
See it against your environment
We'll walk through what Patchblox adds to the tools you already run.