Service 03 — Security
Patch Management
Most breaches exploit a hole that already had a fix. Keeping systems patched is unglamorous, easy to put off, and one of the highest-value things you can do for security. So we do it for you, on a schedule.
03.1 What we keep current
- Operating systems. Windows and macOS security and feature updates, managed centrally.
- Third-party applications. Browsers, PDF readers, office suites, conferencing tools, runtimes — a frequent and often-forgotten attack route.
- Firmware & drivers where relevant to security or stability.
03.2 Scheduled, tested, reversible
An update that breaks a line-of-business app at 9am is its own kind of outage. We manage that risk at every step.
1
Staged rollout
Patches go to a pilot group first, then the fleet once proven safe.
2
Off-hours by timezone
Installed outside each user's working hours — no lost mornings, anywhere.
3
Logged & reversible
Every change recorded; a problematic patch is held or rolled back.
03.3 What you get back
- A patch-compliance figure for your fleet, each cycle.
- A record of what changed on each device and when — valuable for audits, insurance and compliance questionnaires.
- Fewer "please update" nags for your staff — it just happens in the background.
Why this matters
Unpatched software is the single most common way organisations get compromised. Patching won't stop every threat, but skipping it leaves a door open that a fix had already closed.