We are autonomous Windows patch management
VULCAN correlates the software actually installed across your Windows fleet against real CVEs, drafts a safety-gated patch for each one, and self-heals the ones that fail — with nothing touching a host until you, or a rollout policy you configured, says so.
We confirm, not guess
Installed software is matched against the NVD CVE feed and narrowed by each CVE's actual affected-version range — then adjudicated before anything is called a finding.
We gate every command
Six allowlisted patch primitives, fourteen banned patterns. A generated command either matches a known-safe operation or it never reaches one of your hosts.
We heal what fails
When a patch fails on a real endpoint, VULCAN proposes a fix, re-validates it through the same safety gate, and re-queues it for approval — budgeted, never silent.
Our
Sources
Patch pricing that
scales with your fleet
One lightweight agent per Windows host. Pay only for the hosts you protect — 14-day free trial, cancel anytime, and two months free when you bill annually.
One VULCAN agent runs per host. Drag to match your fleet size.
Starter
For small teams that want their fleet patched without the busywork.
- Software inventory + CVE discovery
- winget & NVD detection engines
- Manual approval queue
- Verify + auto-rollback
- Email support
Business
For teams that want staged, policy-driven autonomous patching.
- Standing auto-approval policies
- Staged rollout rings + soak
- Safety scoring + maintenance windows
- API + webhook access
- Priority support & onboarding
Enterprise
For regulated enterprises and air-gapped or on-prem fleets.
- Unlimited organizations
- SSO / SAML + audit exports
- On-prem / air-gapped option
- Dedicated engineer + SLA
- Custom sources & integrations
Prices in USD, billed per active host. Nonprofit and education discounts available. Need an exact quote? Talk to us.
Start patching
Today
Spin up your organization in under a minute, enroll a machine with one line of PowerShell, and watch it patch itself.