Mark Shavlik is CEO and CTO of Senserva. A former member of the Microsoft Windows Kernel team, Mark created HFNetChk and MBSA for Microsoft, and his team built the SMS 2.0 SUS Feature Pack. Mark and his team developed core patch management technologies that were later used in Windows Server Update Services (WSUS). He founded Shavlik Technologies, one of the industry's leading patch management companies, and sold it to VMware; the model he designed is still in use in many major patching products.
Take the parts your product needs: patching, Mac, Linux and security configuration management, under an OEM agreement and under your brand, on one platform, Senserva 360.
The Senserva OEM program. Senserva is a member of the Microsoft Intelligent Security Association (MISA), with approved Microsoft Entra ID and Intune integrations.
Patching your own machines? See Senserva 360 Patch+.
Take one option or all four. Each comes with the same accuracy rules as Senserva's own products.
Every missing Microsoft and third-party patch on Windows, found by what is really on disk and ranked with exploited vulnerabilities first. Windows 10 and 11, Windows Server 2012 R2 to 2025, .NET, Edge, Microsoft 365 Apps, Teams and SQL Server, plus apps such as Chrome, Firefox, Acrobat Reader, Zoom and VS Code. Every missing patch carries an install-proof label: proven by Senserva, or "Install not yet proven by Senserva". Installing: Coming Soon.
A native Mac app and engine that scan the Mac they run on against Apple's macOS, Safari and Xcode releases and the Mac builds of apps such as Chrome and Firefox.
Local scans read the installed packages directly, proven on Ubuntu, Debian, Red Hat, Fedora and Alpine, from the p25 scanner built Native AOT, with .deb, .rpm and .apk packages and a scheduled scan.
Linux: Debian, Ubuntu, Fedora, Red Hat Enterprise Linux (UBI) and Alpine, through each distribution's own package manager (apt, dnf, apk).
650+ is Siemserva's count, from senserva.com, October 2026. The patching counts are the Senserva patch repository's, 25 October 2026. Features and data coverage may change.
We eat our own dog food: Senserva's products are built on the same SDK you get from us. Nothing held back.
Patch25.Sdk: one NuGet package with the engine inside it, signed by Senserva, on a private partner feed with a read-only token for your company, under an OEM agreement. One client scans and inventories, and returns documented JSON; your product draws every screen. Stable and preview members are marked. AOT-compatible; AI is optional. The patch SDK.
Senserva 360 Patch+, the desktop app, runs on the same patch SDK you embed. Take it whole, under your brand, or build your own screens over the SDK.
The p25 scanner, built Native AOT for Windows, Linux and macOS and signed on Windows, with JSON output, and the Siemserva command line run both engines from scripts and pipelines.
Siemserva's engine is delivered as NuGet packages under an OEM agreement. Add your own findings through SenservaWriter or Senserva JSON. Product-specific checks and patch support for your customers' software are built with you, by agreement. The Senserva SDK.
What happens to every patch, from Senserva's lab to your machines. The scanner judges what is really on disk: file, registry, package and app versions, not a log that says an update ran. AI-enhanced, not AI-dependent: every scan and install works without AI; bring your own model when you want it.
Before a product is offered for install, a specialist agent for that product learns how its installer behaves on disposable lab machines. A product it has proven is labelled proven by Senserva.
Every installer must be signed by the product's pinned publisher and pass a malware scan.
Nothing installs until a person consents: each one, or once by opting into scheduled patching.
When an install fails on one of your machines, the agent picks one fix from a fixed list of safe actions (retry machine-wide, close the app and retry, use the other verified installer, or stop and report), the machine checks the choice against policy, and every step is logged. It never runs a command it made up.
Agents that keep the data right: the repair loop, the Lookout watch service and supersedence per product line. More on the agents.
Tell us what your product does and which options you want. OEM packages, feed access and terms are by agreement with Senserva.
Email info@senserva.com, or use the form at senserva.com/oem.html#talk.
Someone at Senserva will reply about the OEM program.
Features and data coverage of the Senserva Patching Platform may change. Siemserva is listed on the Microsoft Security Store. Senserva 360, OEM packages, feed access and terms are by agreement with Senserva. HFNetChk, MBSA, SMS and WSUS are Microsoft products; HFNetChk was developed by Shavlik Technologies and distributed by Microsoft. Other names are trademarks of their owners.