Supported platforms
What Patchblox manages
Patchblox supports operating system versions their vendor still supports, including paid extended support such as Windows ESU and Ubuntu Pro ESM.
Last updated November 2026.
CoverageWindows, Linux and macOS
SupportedPartly supported
WindowsDesktops and servers
Windows 10 with ESUWindows 11Server 2019Server 2022Server 2025
- Inventory and Resource Explorer
- Vulnerability assessment
- Security baselines with evidence
- OS updates through Automation Workflows
- Third-party app updates600+ apps
- Signed scripts
- Built-in real-time actions
LinuxDebian, Red Hat and SUSE families
Ubuntu LTS 20.04 to 26.04Debian 12 and 13RHEL, Rocky, Alma and Oracle 8 to 10FedoraAmazon Linux 2023openSUSE Leap 16.0SLES 15 SP7 and 16
- Inventory and Resource Explorer
- Vulnerability assessment
- Security baselines with evidence
- OS updates through Automation Workflows
- Third-party app updatesDistribution packages
- Signed scripts
- Built-in real-time actions
macOSApple silicon and Intel
macOS 14macOS 15macOS 26macOS 27 on Apple silicon
- Inventory and Resource Explorer
- Vulnerability assessment
- Security baselines with evidence
- OS updates through Automation WorkflowsAssessment only
- Third-party app updates125+ apps, installed through Intune
- Signed scripts
- Built-in real-time actionsSigned scripts
Windows agents run on x64 and ARM64, Linux agents on x86-64 and ARM64.Every version and its notes are in the tables below.
Endpoints
| Platform | Versions | Notes |
|---|---|---|
| Windows | Windows 10 (with ESU) and Windows 11 Windows Server 2019, 2022 and 2025 | x64 and ARM64. Windows Server 2016: the agent runs, but the third-party catalog isn't supported. |
| macOS | macOS 14, 15, 26 and 27 on Apple silicon macOS 14, 15 and 26 on Intel | Assessment and signed scripts |
| Debian family (apt) | Ubuntu 20.04, 22.04, 24.04 and 26.04 Debian 12 and 13 | Ubuntu 20.04 with Ubuntu Pro ESM |
| Red Hat family (dnf) | RHEL 8, 9 and 10 Rocky Linux 8, 9 and 10 AlmaLinux 8, 9 and 10 Oracle Linux 8, 9 and 10 Fedora (current release) Amazon Linux 2023 | |
| SUSE family (zypper) | openSUSE Leap 16.0 SLES 15 SP7 and SLES 16 | openSUSE Leap 16.1 and SLES 16.1 will be added once they ship and are tested. |
Vulnerability assessment covers every distribution listed. Linux agents run on x86-64 and ARM64.
What works on each platform
| Capability | Windows | Linux | macOS |
|---|---|---|---|
| Inventory and Resource Explorer | Yes | Yes | Yes |
| Vulnerability assessment | Yes | Yes | Yes |
| Security baselines with evidence | Yes | Yes | Yes |
| OS updates through Automation Workflows | Yes | Yes | Assessment only |
| Third-party app updates | 600+ apps | Distribution packages | 125+ apps, installed through Intune |
| Signed scripts | Yes | Yes | Yes |
| Built-in real-time actions | Yes | Yes | Signed scripts |
Management planes and data sources
- Microsoft Intune, including multiple tenants
- Azure Update Manager, including Azure Arc-enabled servers
- Microsoft Entra ID and Active Directory
- Configuration Manager site data (one site per Patchblox installation)
- Standalone: the Patchblox agent alone, with no Microsoft dependency
Private Hosted servers
- Server roles run on Windows Server 2019 or later, or on Windows 10 (with ESU) or Windows 11. Linux server support is planned for a later release.
- Memory: 16 GB minimum, 24 GB or more recommended. Dynamic memory isn't supported.
- PostgreSQL 18, installed and tuned by Patchblox.
- A Patchblox agent runs on every Patchblox server and handles its certificate renewal and health monitoring.
Running something not on this list?
Tell us what you need to manage and we'll tell you plainly whether Patchblox covers it.