Patching and security configuration in your product

Coming Soon
Agentic Patch Management (Patent Pending)

Built by a team led by Mark Shavlik

A former member of the Microsoft Windows NT Kernel team, Mark created HFNetChk and MBSA for Microsoft, and his team built the SMS 2.0 SUS Feature Pack. Mark and his team developed core patch management technologies that were later used in Windows Server Update Services (WSUS). He founded Shavlik Technologies, one of the industry's leading patch management companies, and sold it to VMware; the patch model he designed is still in use in many major patching products.

Take the parts your product needs: patching, Mac, Linux and security configuration management, under an OEM agreement and under your brand, on one platform, Senserva 360.

The Senserva OEM program. Senserva is a member of the Microsoft Intelligent Security Association (MISA), with approved Microsoft Entra ID and Intune integrations.

Patching your own machines? See Senserva 360 Patch+.

Four options, one platform

Take one option or all four. Each comes with the same accuracy rules as Senserva's own products.

Patching

Every missing Microsoft and third-party patch on Windows, found by what is really on disk and ranked with exploited vulnerabilities first. Windows 10 and 11, Windows Server 2012 R2 to 2025, .NET, Edge, Microsoft 365 Apps, Teams and SQL Server, plus apps such as Chrome, Firefox, Acrobat Reader, Zoom and VS Code. It installs products that have passed the install lab.

Mac

A native Mac app and engine that scan the Mac they run on against Apple's macOS, Safari and Xcode releases and the Mac builds of apps such as Chrome and Firefox.

Linux

Local scans read the installed packages directly, proven on Ubuntu, Debian, Red Hat, Fedora and Alpine, from the p25 scanner built Native AOT, with .deb, .rpm and .apk packages and a scheduled scan.

Linux: Debian, Ubuntu, Fedora, Red Hat Enterprise Linux (UBI) and Alpine, through each distribution's own package manager (apt, dnf, apk).

Security configuration management

Microsoft 365
Siemserva's 650+ checks across Microsoft 365, Intune, Defender, Entra ID and Purview, ranked by Severity, with validated fixes.
Windows machines
Basic security settings, such as SMBv1, UAC, LSA protection, the firewall and PowerShell 2.0, checked in the same scan as patches.
Linux machines
Checks such as root SSH sign-in, SSH password sign-in and ASLR.
Fix It
Click to fix a finding, then the check runs again to confirm.
650+
Siemserva: Microsoft 365 security checks
80+
Patching: vendor and threat sources
3,300+
Patching: products in the repository
91,000+
Patching: patches, rebuilt daily

650+ is Siemserva's count, from senserva.com, October 2026. The patching counts are the Senserva patch repository's, 25 October 2026. Features and data coverage may change.

One SDK, and the apps built on it

Senserva's own patch app runs on the same SDK you embed, so your product gets what it gets.

The patch SDK

Patch25.Sdk and the engines as NuGet packages on a private partner feed, under an OEM agreement. One client scans, investigates and installs, and returns documented JSON; your product draws every screen. AOT-compatible, and when you want AI, the model call is your own. The patch SDK.

Apps built on it

Senserva 360 Patch+, the desktop app, runs on the same patch SDK you embed. Take it whole, under your brand, or build your own screens over the SDK.

Command line too

The p25 scanner, built Native AOT for Windows, Linux and macOS and signed on Windows, with JSON output, and the Siemserva command line run both engines from scripts and pipelines.

Assessment libraries and extensions

Siemserva's engine is delivered as NuGet packages under an OEM agreement. Add your own findings through SenservaWriter or Senserva JSON. Product-specific checks and patch support for your customers' software are built with you, by agreement. The Senserva SDK.

Agentic patching, step by step

The scanner judges what is really on disk: file, registry, package and app versions, not a log that says an update ran. AI-enhanced, not AI-dependent: every scan and install works without AI; bring your own model when you want it.

1. Learn

A product specialist agent per product learns its install on disposable lab machines. 7 products have passed.

2. Verify

The installer must be signed by the product's pinned publisher and pass a malware scan.

3. Consent

A person consents before anything installs: each one, or once by opting into scheduled patching.

4. A failed install at the customer site

The agent picks one fix from a fixed list of safe actions (retry machine-wide, close the app and retry, use the other verified installer, or stop and report), the machine checks the choice against policy, and every step is logged. It never runs a command it made up.

Agents that keep the data right: the repair loop, the Lookout watch service and supersedence per product line. More on the agents.

Your brand, your tenant, your data

Under your brand
Senserva 360 is built to white-label: screens, reports and sites take your brand.
Take it whole or in layers
Senserva 360 supplies sign-in, the engines' Azure Function, AI agents and ready-made screens; or embed any layer through the SDK.
You operate it
Deploy the same template in your own Azure, commercial, GCC High or sovereign; findings, names and reports stay in your tenant, and a license check and a usage count are all that reach Senserva.
Hosted patch data, with registration
The patch data is Senserva's: it is not open source and not offered as a download.
MSPs too
One set of code: the instance an MSP runs is the same one Senserva runs for its own users, and customers' data stays in the MSP's tenant.

Download the one-pagers

Talk to us about OEM

Tell us what your product does and which options you want. OEM packages, feed access and terms are by agreement with Senserva.

Email info@senserva.com, or use the form at senserva.com/oem.html#talk.

I am interested in (pick any)

See our privacy policy. No tenant or machine data is collected by this form. Or email info@senserva.com.

Thanks, we have it

Someone at Senserva will reply about the OEM program.

Features and data coverage of the Senserva Patching Platform may change. Siemserva is listed on the Microsoft Security Store. Senserva 360, OEM packages, feed access and terms are by agreement with Senserva. HFNetChk, MBSA, SMS and WSUS are Microsoft products; HFNetChk was developed by Shavlik Technologies and distributed by Microsoft. Other names are trademarks of their owners.