PATCH MANAGEMENT
Fleet · 86 hosts
DC-01 · Windows Server 2022Up to date
RDS-03 · Windows Server 20193 pending · 21 days
PBX-GW · Ubuntu 22.04CVE-2026-1183 · Critical
42 workstationsMaintenance window tonight

You can't patch
what you can't see.

Spreadsheets, WSUS reports and scattered apt logs don't tell you what matters: which host is exposed to which vulnerability, right now. PatchBoard puts every server and workstation on one board, ranked by real risk, and lets you approve and schedule patches without touching each machine.

View pricing → See how it works
1screen for Windows, Linux & apps
CVE-driven prioritisation
0VPN or WSUS required
<1hto see your whole fleet
THE REAL PROBLEM

Every unpatched server
is a door left open

Most breaches exploit vulnerabilities with a patch that has existed for months. The problem is never the patch — it's knowing who needs it.

60%

of breaches involve a vulnerability with an available patch

102 days

average time between patch release and deployment

57%

of victims say the breach could have been avoided by patching

1 in 4

servers have a critical CVE open right now

HOW IT WORKS

From CVE to patched
without the spreadsheet

PatchBoard inventories, prioritises, schedules and reports — across Windows, Linux and third-party applications.

Unified inventory

Windows Server, Windows 10/11, Ubuntu, Debian, RHEL and common third-party apps (browsers, Java, Adobe, 7-Zip…). One agent, one list, always current.

CVE mapping and risk score

Each missing patch is matched against the CVE database and scored by severity, exploit availability and host exposure. Fix what attackers actually use first.

Maintenance windows

Define windows per group — production at 03:00 Sunday, workstations at lunch — and PatchBoard deploys only then. Reboots are scheduled, never surprising.

Approve once, deploy everywhere

Review the list, approve with one click, roll out to a pilot group first, then to everyone. Roll back if something misbehaves.

Compliance history

Who approved what, when it was installed on which host and whether it succeeded. Proof for auditors, insurers and management.

Reports that explain themselves

Weekly summary: patched, pending, failed, exposed. Per site, per group, per severity. Readable by someone who isn't a sysadmin.

SET-UP

Up and running in
one afternoon

A small agent on each host — deployable via GPO, Intune, Ansible or a one-liner. No WSUS, no VPN, no inbound ports.

01

Deploy the agent

Push it with Group Policy, Intune or your config tool. Linux hosts take a single curl command.

02

Group your hosts

By site, role or criticality. Groups drive maintenance windows, approvals and reports.

03

Set maintenance windows

Decide when each group is allowed to patch and reboot. Production gets a narrow window; the rest gets more freedom.

04

Approve and relax

Each week, review the prioritised list, approve, and let PatchBoard deploy on schedule. Your job becomes reading the report.

PRICING

Per host,
not per surprise

Servers and workstations count the same. Unlimited technicians on every plan.

Starter
€1.90 / host / month
For small fleets that want visibility first.
  • Up to 25 hosts
  • Windows & Linux inventory
  • CVE mapping
  • Email alerts
Fleet
€0.90 / host / month
For multi-site organisations and MSPs.
  • 250+ hosts
  • Multi-tenant dashboard
  • API & webhooks
  • Custom risk policies
  • Priority support

Not sure which plan fits, need more than Enterprise, or want PatchBoard bundled with other Dev Devices products? We will put a quote together for your setup.

Contact sales →

Which of your servers
has a critical CVE open right now?

If you can't answer in ten seconds, PatchBoard can — within the hour.

Request a quote →