Business Patch Management

Automatic patching for Windows and third-party applications, controlled from one central console.

Description

Attackers rarely use a vulnerability nobody has heard of. They use one that was patched long ago but never installed. The figures in the source are blunt: 86 percent of reported vulnerabilities were found in third-party applications. Exploiting an open gap may take an attacker 30 days; closing it takes companies 186 days on average.

Avast Business Patch Management closes it automatically. It scans Windows systems and hundreds of third-party applications for missing patches and deploys them – on a schedule or manually for single devices and groups. Severity is rated with CVSS, so critical patches go first.

Deployment suits networks with many devices: a master agent downloads missing patches once and distributes them internally, saving bandwidth. Patching works regardless of location, including machines behind the firewall or in power-saving mode. Unstable patches can be rolled back or ignored.

What's included

• Automatic scans – patch scans at configurable intervals, every 24 hours by default, with automatic deployment.
• Third-party patching – Windows and hundreds of common applications such as Google Chrome, iTunes, Oracle, Java and Adobe.
• Flexible deployment schedules – release approved patches at a chosen time or roll them out manually to groups and devices.
• Master agent – downloads missing patches once and distributes them to all managed devices.
• Intuitive dashboard – graphical view of installed and missing patches.
• Configurable patches – select by vendor, product and severity, with exceptions for applications.
• Rollbacks – withdraw unstable patches or ignore them.
• Comprehensive reporting – determine the state of device software via configurable reports.

Who it's for

Businesses whose IT can no longer track patch levels by hand, and anyone who has to prove compliance. It requires Windows devices and the Avast Business Hub.

Good to know

• A standalone product – Patch Management is not an extension of an antivirus bundle but its own product, licensed per device, and is also part of Ultimate Business Security.
• Windows only, managed only – available for Windows workstations and servers, not macOS, and never without the online platform.
• Licensing per device and term
• Renewal through the renewal product of the same name

All prices net plus 19% VAT.