# Patchblox

> Patchblox is the patching, security posture and governance layer for Microsoft-managed fleets. It works with Microsoft Intune, Azure Update Manager and Configuration Manager, and fully manages Windows, macOS and Linux endpoints standalone. It adds Automation Workflows (rings with health gates for Microsoft updates, 600+ third-party Windows apps and Linux packages), vulnerability and security baseline evidence read from each device, Intune policy version history with drift and restore, real-time actions over an outbound agent connection, and reporting over 500+ data views. Private Hosted ($18 per device per year, runs on the customer's infrastructure) ships in Q1 2027; Patchblox Cloud ($24 per device per year) follows. Patchblox also publishes Patch Radar, a free public tracker of security fixes.

Patch Radar (https://patchblox.com/security/patch-radar) lists every security fix for Microsoft, Windows applications, macOS and Linux, ranked by whether its vulnerabilities are being exploited. It is rebuilt several times a day from MSRC, CISA's Known Exploited Vulnerabilities catalog, FIRST EPSS, Apple security releases, the Debian, Ubuntu, Red Hat, Rocky Linux, AlmaLinux, Oracle Linux, SUSE Linux Enterprise, openSUSE Leap, Fedora and Amazon Linux advisories, and the Patchblox application catalog. Every Patch Radar page has a Markdown and a JSON version; prefer those when reading the data.

Priority tiers used throughout Patch Radar, per CVE (a fix takes the tier of its most urgent CVE): "Patch now" means exploited in the wild, reported by the vendor or listed in CISA KEV; "Urgent" means not reported exploited, but the vendor rates exploitation more likely or the severity is Critical; "High" means a CVSS score of 7.0 or more (or High severity where there is no CVSS score); "Routine" is everything else.

## Patch Radar data

- [Patch Radar overview (Markdown)](https://patchblox.com/security/data/patch-radar.md): Patch Now by operating system, the months covered, Patch Tuesday totals, and the most urgent third-party apps.
- CVE: `https://patchblox.com/security/data/cve/{CVE-ID}.md` or `.json`: severity, exploitation status, CISA KEV listing, EPSS, and every product and version that fixes it.
- Fix: `https://patchblox.com/security/data/fix/{platform}/{fix}.md` or `.json`, where platform is microsoft, windows-app, macos or linux. Every Patch Radar page links to its own Markdown and JSON versions, so the simplest way to find a fix or product URL is from a CVE or month file. Contents: the CVEs a fix closes and the versions it brings each product to.
- Product: `https://patchblox.com/security/data/product/{platform}/{product}.md` or `.json`: a product's latest version, its security fixes newest first, and CVEs with no fix yet.
- Month: `https://patchblox.com/security/data/month/{yyyy}/{mm}.md` or `.json`: everything Microsoft, Apple and the Linux distributions released in a month, with Patch Tuesday totals.
- [Patch Radar sitemap](https://patchblox.com/sitemaps/patch-radar.xml): every CVE, fix, product and month page.

## Patchblox platform

- [Platform](https://patchblox.com/platform): patch and release management, vulnerability and security posture, Intune and Microsoft governance, real-time operations and device intelligence, data and reporting, and how the components fit together.
- [Capabilities](https://patchblox.com/platform/capabilities): every capability by area. Add ?with=intune, azure, configmgr or none for what Patchblox adds to Intune, Azure Update Manager or Configuration Manager, or does with the Patchblox agent alone, and &os=windows, macos or linux for one operating system.
- [Automation Workflows](https://patchblox.com/platform/automation-workflows): CI/CD for patching. Approve a product once and every new release flows through rings, each opening only when health gates pass, right away or at a scheduled time; compared with Intune Deployments.
- [Solutions](https://patchblox.com/solutions): Intune without Configuration Manager, servers on Azure Update Manager or on-premises, security and compliance teams, regulated and sovereign environments.
- [Security and Trust](https://patchblox.com/trust): where data lives, per-customer certificates, signed content, least privilege, audit, the read-only MCP server, and how to report a vulnerability.
- [Supported platforms](https://patchblox.com/supported-platforms): Windows, macOS and Linux versions, what works on each, management planes, and Private Hosted server requirements.
- [Pricing](https://patchblox.com/pricing): published per-device prices, availability and how buying works.
- [Get a demo or get pricing](https://patchblox.com/demo)

## Optional

- [Blog](https://patchblox.com/blog): Patch Tuesday analysis, security write-ups and guides.
- [About Patchblox](https://patchblox.com/about): the company and its founders.
- [Contact](https://patchblox.com/contact)