Enrol a machine once; manage its updates, software, schedules and compliance from the Controller’s web console.
PatchWalker manages Windows over WinRM (HTTPS, port 5986) and Linux over SSH (port 22). There is nothing to install, update or troubleshoot on your endpoints — enrol a machine and it’s under management.
Windows machines can authenticate with a per-machine certificate (works in workgroups and domains) or, on a Domain / gMSA install, with the Controller’s Kerberos identity.
Check and install Windows Update and Linux package updates across your estate. Track outdated third-party applications and push updates, and deploy your own software packages and bundles to Windows and Linux targets.
Define recurring install schedules scoped to all machines, a group, or a hand-picked set. Each schedule installs operating-system updates, software updates, or both — inside a maintenance window, with a reboot policy you control.
A live dashboard summarises estate health, pending updates and group compliance, with click-through detail behind every figure. Export reports to CSV or print, and email a scheduled compliance report automatically.
A built-in package mirror and Ubuntu Pro contracts proxy let you attach machines to Ubuntu Pro and serve ESM updates to endpoints that can’t reach the internet — the Controller fetches once and serves your estate.
Role-based access with custom roles, Microsoft Entra single sign-on with group-to-role mapping, and a break-glass administrator. Secrets are bound to the Controller, and encrypted backups can run on a schedule to a local or network folder.
It’s free. Install on a Controller and enrol your first machine in minutes.
Download PatchWalkerComing from WSUS? See how PatchWalker compares as a self-hosted WSUS alternative for Windows and Linux.