Curated, Not Community. Secured, Not Assumed.
600+ enterprise apps with signature verification, CVE correlation from four threat feeds, and a 24-hour security update SLA. From vendor release to your environment — tested, signed, and validated.
From Vendor Release to Your Devices
Every package goes through a four-stage pipeline before it reaches your endpoints
Detect
Vendor releases a new version. Our catalogs detect it within hours — Windows (winget-based) and macOS (AutoPkg-based).
Validate
Signature verification, malware scanning, and installation validation. Authenticode enforcement via pbget, our hardened winget fork.
Correlate
CVE data from NVD, MSRC, OVAL, and OSV feeds is correlated. CVSS scores, exploit availability, and severity assigned.
Publish
Signed .pbcontent package published to your catalog. Available for deployment through Intune, AUM, or standalone managed devices.
Application Vulnerability Hub
See every application in your environment with its security status at a glance. Risk badges flag Exploited CVEs (red), Critical CVEs (orange), and CVE Risk (yellow). Each app shows installed vs available versions, device count, compliance percentage, CVE count, and Max CVSS score.
Click any app to see exactly which devices need the update — with device name, OS version, installed version, available version, and status. Launch Automation Tasks directly from the detail view to push the update immediately.
Why Curated Matters
The public winget repository has 10,000+ packages with no security guarantees. Anyone can submit a manifest. There is no signature verification requirement, no malware scanning, and no installation validation.
Patchblox maintains a curated enterprise catalog where every package is vetted. Our hardened winget fork (pbget) requires signed content — unsigned packages are rejected at the client. The macOS catalog uses AutoPkg with bundle ID extraction, code signature timestamps, and can publish directly to Intune.
Secure Your Software Supply Chain
600+ apps, every CVE, 24-hour SLA — see your environment's exposure in minutes