The updates nobody is doing.
Managed patching for Windows, Mac and third-party software on the flat per-person plan, on a monthly cycle with reporting.
Patching is the least interesting thing an IT provider does and the one most likely to be quietly skipped, because nothing visibly breaks when it does not happen. It breaks later, all at once, usually through a vulnerability that had a fix available for months.
For an office with no IT person, the realistic status quo is that Windows updates when it nags loudly enough and third-party software never updates at all. The browser, the PDF reader and the video conferencing client are the ones that matter and the ones nobody thinks about.
So this runs on a schedule rather than on somebody remembering: operating system patches on a monthly cycle after a short soak, third-party applications alongside them, and a note to you about anything that needed a reboot or failed twice.
What is covered
Included in the base plan. There is no per-endpoint patching fee and no separate charge for the monitoring tooling.
Included
- Windows and macOS operating system updates on a monthly cycle
- Third-party applications: browsers, PDF readers, conferencing clients, and the rest of the usual set
- A short soak period before rollout, so a bad vendor patch does not hit everyone at once
- Reboot coordination, so machines are not restarted mid-meeting
- Retry and escalation on anything that fails twice
- A monthly note on what went out and what did not
Not included
- Server patching, which is part of server management
- Firmware on network hardware, which is part of network gear management
- Line-of-business application upgrades, which are usually vendor project work
- Emergency out-of-hours patching for a zero-day, which is a Priority Escalation
Questions on this specifically
How much does patch management cost per endpoint?
Nothing per endpoint. It is part of the per-person plan, and a person with three machines is still one charge. Per-endpoint patching pricing is common in this industry and it is how small bills grow.
Do you charge separately for the RMM tooling?
No. The remote monitoring and management software is our operating cost. Billing a client for the tool you chose to buy is charging them for your own overhead.
Will updates reboot machines during the workday?
Not deliberately. Reboots are coordinated, and where a machine needs one we tell the person rather than restarting under them. Anything urgent enough to override that gets a conversation first.
What if a Microsoft patch breaks something?
That is what the soak period is for: patches sit for a short window before general rollout, so a bad one does not reach every machine on day one. If something does break, rolling it back is support, not a separate charge.
See what patch management costs for your office
Every number published, with a monthly minimum stated up front.