In short: ThreatDown Vulnerability and Patch Management scans your endpoints for vulnerable modern and legacy applications, ranks what it finds using CVSS scores and CISA recommendations, and deploys software updates to close the gaps, all from the ThreatDown agent and console. Through Forever Systems, vulnerability management alone or combined with patching is licensed per endpoint and billed monthly.
What it is
Many attacks exploit known vulnerabilities for which a fix already exists. ThreatDown's vulnerability and patch management closes that gap in two steps on the same agent:
- Vulnerability assessment scans endpoints for vulnerable modern and legacy applications and ranks the results using Common Vulnerability Scoring System (CVSS) scores and recommendations from the US Cybersecurity and Infrastructure Security Agency (CISA)
- Patch management deploys software updates to fix what the scan finds, with critical updates prioritised and the process automated
Both are managed from ThreatDown OneView alongside your endpoint protection, so one screen shows whether a device is protected, vulnerable or up to date. ThreatDown's Security Advisor adds recommendations on patching, updates and policy changes that raise each endpoint's security health score.
Options and what is included
| Option | Includes | Unit |
|---|---|---|
| Vulnerability Management | Continuous vulnerability scanning of applications, CVSS and CISA-based prioritisation and dashboards | Endpoint, monthly |
| Vulnerability and Patch Management | Everything above plus patch deployment, automation and prioritisation of critical updates | Endpoint, monthly |
If you bought direct from ThreatDown, vulnerability assessment is part of every bundle from Core upwards and patch management starts in the Advanced bundle. Through us, either option can be enabled on any endpoint running the ThreatDown agent, whatever other modules it has.
How it is licensed
| Item | How it works |
|---|---|
| Unit | Each endpoint scanned or patched |
| Term | Monthly, billed on usage from OneView |
| Scope | Enable on all devices or on chosen groups, such as servers first |
| Combination | Works alongside Endpoint Protection, EDR or MDR on the same agent |
There is no separate patching server to buy or maintain. Prices depend on the number of endpoints and the modules you choose, so ask us for a quote. For how device-based counting works across mixed estates, see per-user vs per-device licensing.
Requirements and deployment
Vulnerability and patch management use the standard ThreatDown agent, deployed without a reboot through your RMM, Microsoft Intune, Group Policy or an installer. Endpoints need internet access to download updates.
Our usual approach:
- Run a first vulnerability scan across all endpoints and share the results with you.
- Agree patch rings: a small test group first, then the wider estate, with servers patched in maintenance windows.
- Automate approval for routine updates and keep critical CVEs on a fast track.
- Report monthly on what was found, what was patched and what is waiting on you, such as an application that needs a licence upgrade before it can be updated.
This maps directly onto the security update management control in Cyber Essentials, which requires high and critical security updates to be applied within 14 days of release.
Who it suits
It suits organisations that know patching slips when the IT team is busy, those preparing for Cyber Essentials or Cyber Essentials Plus, and anyone already running ThreatDown who wants one console instead of a separate patching tool. Schools and charities with older applications benefit from seeing exactly which legacy software is vulnerable.
For deeper testing beyond endpoint scanning, compare options in vulnerability management and penetration testing.
How we help
We run the scans, interpret the results, set up patch rings and chase the exceptions, so vulnerable software is fixed rather than just reported. Your monthly summary shows the trend, and your invoice reflects the endpoints covered. Contact us for a quote or a one-off vulnerability scan.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is the difference between ThreatDown Vulnerability Management and Patch Management?
Vulnerability management finds and prioritises vulnerable software. The combined vulnerability and patch management option also deploys the updates that fix it.
Does ThreatDown patch third-party applications?
ThreatDown's scanning covers modern and legacy applications, and its patch management deploys software updates to fix what the scan finds. Coverage varies by application and vendor, so we check your specific applications when we scope.
Does it help with Cyber Essentials?
Yes. It supports the security update management control, which requires high and critical updates to be applied within 14 days of release.
Do I need a separate patching server?
No. Scanning and patching use the ThreatDown agent and cloud console, with no on-premises server.