Skip to main content

Patch Management

Fully integrated in GravityZone, Patch Management keeps operating systems and software applications up to date and provides a comprehensive view on the patch status for your managed Windows and Linux endpoints.

The GravityZone Patch Management module includes several features, such as on-demand or scheduled patch scanning, automatic or manual patching, and reporting on missing patches.

Learn more about Bitdefender Patch Management supported vendors and products.


  • Patch Management is an add-on available with a separate license key for all available GravityZone packages.

  • Linux endpoints use license seats from the pool of licenses for server operating systems.

Patch Management settings are automatically configurable with maintenance windows. See details here.

To manage patches manually, learn about:


Patch Management uses the following components:

  • GravityZone Control Center

  • Security agent (Bitdefender Endpoint Security Tools installed on Windows and Linux endpoints)

Install and configure Patch Management

To start using this feature, follow the steps below:


If your endpoints already have the BEST agent deployed, but the Patch Management module is not installed, you can use a Reconfigure agent task to add the module to the endpoint.

If no agent is installed, you will need to use an installation package to deploy BEST on your endpoints along with all required modules.

Below we have included both procedures.

Test out the feature