Tenable
Continuous Patch Management
Tenable Patch Management is a Tenable product for continuous patch management. It takes the vulnerabilities Tenable has already found and prioritised, identifies the patch that closes each one, and deploys it automatically within guardrails you define.
What it is
Most organisations patch in cycles. Once a month, updates are gathered, tested, and rolled out. Between cycles, known vulnerabilities stay open, often for weeks, while attackers typically exploit a new vulnerability within days.
Continuous patch management turns this around. Instead of fixed rounds, patching runs as an ongoing process: when a vulnerability appears in the environment, it is correlated with the right update, and that update is deployed as soon as it has been tested and policy allows. The time from discovery to closure drops from weeks to days, without IT operations handling every update by hand.
Tenable Patch Management is powered by Adaptiva and plugs directly into Tenable Vulnerability Management, Tenable Security Center, and Tenable One. The security team that prioritises and the IT team that patches work from the same data.
How it works
- Vulnerability-to-patch correlation. Every vulnerability Tenable finds is automatically matched to the most up-to-date patch that fixes it. No manual hunt for the right package.
- Policy instead of manual approval. You set rules for what gets patched, when, and how, with separate SLAs based on criticality and exploitability. The rest runs on its own.
- Deployment rings with automated transitions. Updates go first to a test group, such as one percent of workstations, then on to the rest based on a delay, an approval, or measured success.
- Tested before publishing. Adaptiva validates and packages patches before they are made available. Patches that fail are blocked automatically.
- Full control throughout. Individual deployments can be scheduled, paused, or rolled back in real time. A global pause stops all patching across the organisation when needed.
- Broad coverage. Windows, macOS, and Linux, including drivers and BIOS, plus more than 20,000 third-party applications and over 250,000 unique patches.
- Flexible delivery. Available as SaaS or on-premises.
Who it’s for
Tenable Patch Management is for organisations that already use Tenable to find and prioritise vulnerabilities and want to close the gap between prioritisation and actual remediation. It suits security and IT operations teams that want to move from monthly patch rounds to an ongoing process, without giving up control over what is deployed and when.