asaasinNew service
Security and Vulnerability Patching
We find it, patch it, and respond fast when it's critical.
Services
Two ways we work
Preventative
- Asset and dependency inventory (SBOM)
- Continuous scanning of web apps, APIs, cloud, containers, servers and endpoints
- Risk-based prioritization using CVSS plus active-exploit signals like the CISA KEV list
- Patch management with staging, testing and rollback plans
- Cloud and configuration hardening
- Secrets and credential exposure scanning
- Access reviews
- Monthly reports and a quarterly posture review
Urgent critical response
- Rapid intake
- Triage
- Containment and mitigation
- Emergency patching or virtual patching (WAF rules)
- Verification rescans
- Post-incident report with hardening steps
Response targets
What you can expect, and when
| Severity | First response | Fix target |
|---|---|---|
| Critical | Acknowledged within 15 min | Engineer engaged within 1 hr, mitigation within 24 hrs |
| High | Acknowledged within 4 hrs | Patched within 7 days |
| Medium | Acknowledged within 1 business day | Patched within 30 days |
| Low | Next scheduled cycle | Patched within 90 days |
Targets are measured from when an issue is reported to us or found by our scans. Exact coverage hours are agreed in your plan.
Coverage
What we cover
If it runs in your environment, we patch it. Here's what that covers.
01Operating systems11 items
02Third-party desktop apps15 items
03Web servers and runtimes11 items
04Application frameworks and dependencies19 items
with dependency upgrades and SBOM tracking
Frameworks
05CMS and ecommerce7 items
06Databases and data stores10 items
07Cloud platforms7 items
08Containers and orchestration6 items
09Infrastructure as code and CI/CD10 items
plus runner and agent patching
10Identity and access6 items
11Network and perimeter6 items
12Virtualization and backup5 items
13Email and collaboration5 items
14Endpoints and mobile3 items
15Security tooling and firmware3 items
Tools we work with
We work inside your existing stack or bring our own tooling.
Don't see something? If it has a version number, we can track and patch it. Just ask.
How it works
From first call to ongoing patching
1
Intro call
We talk through what you're running and what's worrying you.
2
Baseline assessment
We scan and review your systems to see where you actually stand.
3
Prioritized patch plan
We rank issues by real risk and lay out what gets fixed first.
4
Ongoing patching & reporting
We keep patching on schedule and send you plain reports.
FAQ
Questions, answered
Do you work with our existing team?
Yes. We can work alongside your engineers and IT staff, or run security and patching as a full lane for you.
Do you need production access?
Only what the work needs. We use least-privilege access within a scope we agree on with you up front.
Can you help during an active incident?
Yes. Choose "Urgent / critical issue" in the form below and we'll treat it as critical.
Talk to us
Tell us what you're running and what's going on. We'll get back to you.