Patch Compliance.
Verified. Automated.

Know which machines are behind on patches. Track Windows updates, missing KBs, and compliance — all from one dashboard.

Start Free Trial See How It Works

How It Works

1

Install the Agent

Deploy the lightweight PatchGuard agent to your Windows endpoints. Takes 30 seconds, runs as a service.

2

Automatic Scanning

The agent queries Windows Update for pending patches, installed hotfixes, and missing critical updates. Reports back automatically.

3

Monitor & Alert

See patch status across your entire fleet. Get alerts when machines fall behind, critical updates are missing, or reboots are pending.

4

Prove Compliance

Generate patch compliance reports for audits, cyber insurance, and internal reviews. Export to CSV anytime.

Everything You Need

Real-Time Patch Status

Every machine reports its update status on a schedule. Know instantly when something changes or falls behind.

Missing Update Tracking

See exactly which KBs are missing on each machine. Filter by severity — critical, important, moderate, or low.

Compliance Reports

One-click compliance reports showing patch status across your fleet. Track improvement over time. Export to CSV.

Instant Alerts

Get notified when machines fall behind on patches, critical updates are missing, or reboots are pending.

Multi-Tenant / MSP Ready

Manage multiple companies from one console. Per-company policies and reporting. Built for MSPs.

Reboot Tracking

Know which machines need a reboot to finish installing updates. Track reboot-pending status across the fleet.

Simple, Transparent Pricing

Starter

$2/machine/mo
Up to 100 machines
  • Email alerts
  • Compliance reports
  • 30-day history

Enterprise

$1/machine/mo
Unlimited machines
  • Everything in Pro
  • Custom policies
  • API access
  • Dedicated support

Start with a 14-day free trial. No credit card required. Full access to all features.

Frequently Asked Questions

What operating systems are supported?

PatchGuard currently supports Windows 10 and Windows 11 endpoints. Windows Server support is also available. The agent queries Windows Update directly for the most accurate patch data.

How does the agent work?

The agent is a lightweight Windows service that checks for pending updates and installed hotfixes on a configurable schedule (default: every hour). It uses minimal resources and does not install or modify updates — it only reports status.

Does the agent install updates automatically?

No. PatchGuard is a monitoring and compliance tool. It reports which updates are pending and missing but does not install them. You retain full control over your patching process.

What compliance frameworks does this help with?

PatchGuard helps demonstrate compliance with SOC 2, HIPAA, PCI-DSS, NIST 800-171, CIS benchmarks, and most cyber insurance questionnaires that ask about patch management.

Can I use this as an MSP?

Absolutely. PatchGuard supports multi-company management from a single tenant. Each company gets its own machines, policies, and reports.

Is there a free trial?

Yes, every plan includes a 14-day free trial with full access. No credit card required.