The Patch Management module has the following requirements:
Feature Requirements
- Subscription to Incident Response, Endpoint Protection, or Endpoint Detection and Response.
- Subscription to the Patch Management module.
Minimum System Requirements
Endpoints must be running at minimum one of the following operating systems to scan for and install patches with the Patch Management module. For our Endpoint Protection requirements, see System requirements for Nebula.
- Windows Server: 2025, 2022, 2019, 2016.
- Windows: 11, 10 version 1607 or later.
- macOS: Tahoe 26, Sequoia 15, Sonoma 14, Ventura 13, Monterey 12, Big Sur 11.
Notes
- In January 2025, Vulnerability & Patch Management support for Windows 8.1 ended.
- In May 2025, Vulnerability & Patch Management support for macOS 10.x ended.
- In August 2025, Vulnerability & Patch Management support for Windows 10 version 1511 and older, as well as Windows Server 2012 and 2012 R2 ended.
- Windows Server Update Services (WSUS) and Configuration Manager are not supported. Windows patches may not show in the console if either is the update source.
- Operating System patching is only available for Windows.
Return to Patch Management guide.