4 vendors that publish a price · Prices by category

Compare pricing

Third party patch management: the application catalogue is the whole product

Windows and macOS update themselves, and every RMM in this record can drive that better than the built-in scheduler does. What no operating system updates is the browsers, runtimes, PDF readers, conferencing clients and the hundred small applications that make up most of the exploitable surface on a normal fleet. Third-party patch management is that catalogue, and the catalogue is the entire product.

Ask vendors to quote against your actual endpoint count

3rd party patch management software: the only question that matters is the catalogue

Every vendor in this market says it does third-party patching, so the claim carries no information. The questions that do are: which applications are in the catalogue, how quickly a new release appears in it after the vendor ships it, and what the tool does with an application that is not in it. The third answer is the one to press hardest. A product that silently ignores what it cannot patch produces a green compliance report over an unpatched fleet, which is worse than no report at all, because it converts a known gap into a false assurance somebody will act on. Ask for the catalogue list and check your own top twenty applications against it before you compare prices.

Cross platform patch management is a different requirement again

Cross platform patch management means one console patching Windows, macOS and usually Linux, and it matters to two kinds of buyer: an MSP whose clients are mixed, and an internal team with a design or engineering function on Macs. The trap is that support is rarely equal across platforms. A tool with a deep Windows catalogue and a thin macOS one is common and is sold as cross platform without qualification. If a meaningful share of your fleet is not Windows, evaluate the catalogue per platform rather than in aggregate, and weight it by what those machines actually run.

How it is priced, and what this record can evidence

At the vendors here that publish a figure, patching is inside the per-endpoint platform price rather than a separate line: NinjaOne at $1.50 to $3.75 an endpoint a month depending on volume, and Level at a flat $2 a device. Neither prices third-party patching apart, so a standalone comparison of this capability cannot be built from what they publish. Action1, the vendor most associated with a free tier in this category, answers a Cloudflare block to every reader available here, so this record carries no figure for it and will not repeat one from elsewhere. That is a real limit on this page and it is better stated than papered over.

Third party software management is the same catalogue asked about more widely

Patching is one of four things a fleet does to an application it did not write: find it, install it, update it, remove it. Third party software management is the whole set, and the catalogue that decides whether patching works decides the other three as well, because a tool that cannot recognise an application cannot report it as installed or take it off a leaver's machine either. The practical consequence is that the inventory and the patch catalogue should be the same list. Where they are two lists, the gap between them is where unlicensed and unpatched software lives, and nobody looks at it until an audit or an incident.

Questions people ask about third party patch management

What is third party patch management?

Patching the applications the operating system does not update: browsers, runtimes, PDF readers, conferencing clients and similar. That catalogue is most of the exploitable surface on a typical fleet.

What should I ask about 3rd party software patch management?

Which applications are in the catalogue, how fast a new release lands in it, and what the tool does with an application that is not in it. The last matters most, because silent omission produces a green report over an unpatched fleet.

Is cross platform patching really equal across platforms?

Often not. A deep Windows catalogue with a thin macOS one is common and is still marketed as cross platform. Evaluate the catalogue per platform if a meaningful share of your fleet is not Windows.

How much does third-party patching cost?

At the vendors here that publish, it is inside the per-endpoint platform price rather than a separate line: NinjaOne $1.50 to $3.75 a device, Level a flat $2. Action1's page could not be read from here.

Sources

Ask vendors to quote against your actual endpoint count

We pass what you write here to vendors so they can quote. We do not publish it and we do not sell it. Some links on this site are affiliate links and we may be paid if you buy; that never changes what a vendor's own page says, which is all this record reports. We may email you about this enquiry and similar services from this site; opt out any time, including from the first message.

Related answers

See what each vendor publishesTell us your endpoint count and we ask for you