Operating systems
Windows, macOS and Ubuntu updates according to configured policies.
Where the module helps during an attack
Updates close known vulnerabilities before attackers exploit them. This is an indicative view, not a measurement.
| Area | Level |
|---|---|
| Reconnaissance | context |
| Initial access | primary role |
| Execution and persistence | context |
| Escalation and lateral movement | additional protection |
| Impact | no direct role |
| Investigation and recovery | additional protection |
Updates without visiting each computer
Patch & Asset Management automates operating system and third-party application updates. Administrators set console policies and the Heimdal agent executes them on schedule.
The vendor tests and repackages application updates before distribution, so your administrator does not need to prepare every package.
Third-party applications
Common applications from the vendor's catalogue, including removal of outdated or unstable versions.
Custom software
The Infinity Management add-on distributes and updates internal applications using scripts.
Set policies once, manage exceptions continuously
Management uses Heimdal's cloud console. The vendor describes a fully cloud-based solution whose console cannot be hosted on your infrastructure. Managed devices can be in the office or used remotely.
- Group devices and set policies and schedules for each group.
- Enforce critical updates and schedule others for maintenance windows.
- The console shows vulnerabilities by severity, CVE and classification.
- Peer-to-peer distribution reduces internet bandwidth use.
- The module can run alongside WSUS, adding third-party application updates.
Less manual work, clearer priorities
The module particularly helps smaller IT teams managing mixed environments without time to track every application's updates. Set rules and review exceptions instead of updating manually.
Software and vulnerability visibility supports audits and risk management. It does not automatically satisfy NIS2, ISO 27001 or other frameworks.
IT administrator
Fewer manual installations and a clear list of devices awaiting updates.
Management and audit
Documented update and vulnerability status to inform decisions.
Users
Updates scheduled in maintenance windows agreed with the business.
Deployment with APPSEC
Heimdal supplies the module, application catalogue and packages. APPSEC designs and deploys policies as agreed. You decide maintenance windows and which applications may update automatically.
Inventory
We identify your systems, applications and operationally sensitive servers.
Groups and windows
We design device groups, schedules and critical update policies.
Pilot
We verify policies on a smaller group and refine exceptions.
Operation
We hand over report review and failed installation procedures. Support scope is defined in the proposal.
Things to consider
- Servers and critical systems need separate schedules and backups before updates.
- Internal applications require the Infinity Management add-on and installation scripts. The vendor compatibility matrix lists Windows and Ubuntu support.
- Licensing counts devices with the module enabled. Infinity Management is licensed separately.
- We compare the supported application list against your software before preparing a proposal.
