Patch Management / Remediation

From the Solutions table view; having the ability to Filter/Sort on the Asset Importance; so teams can focus on remediation prioritization around the asset risk tiers based on importance

We have several clients with different internal patch policies (i.e. one might require critical server patches to be applied within 7 days, where another one will accept 21 days). I'd love to be able to enter these tolerances into the portal on a per-client basis (with there being a default in place), so we can easily report on any vulnerabilities that are outside of those thresholds. Then they can be manually addressed, risks accepted, etc. Importantly, multiple clients are regulated in the banking space, and they are being told that this level of reporting is required.

Adding the ability to create a custom message box where we can enter text of our choosing. That text box can be sent to the end users screen with custom messaging. Use case: we want to alert end users we are updating their OS/APPS during a patch/maintenance window.

Implement Approval process similar to Suppression for Patching related to vulnerabilities that are high risk, for eg CISA, EPSS> 0.95 This should not include, patches that go through scheduler Any 0 day vulnerability reported should go through approval process to be patched.

Provide a version-lock mechanism that allows selecting a specific app and choosing a version to roll back to. Use stored MSI uninstall commands to remove the bad version and reinstall the selected version.

We often find ourselves going back and forth between ConnectSecure and our RMM tools to remove unwanted or deprecated products. Eg old .Net or C++ installations etc. It would be a huge time saver to work within the Solutions tab and have an Action to uninstall end of life apps.

Build a generic change-management system for patching workflows, AI reports, and suppression controls—ensuring patches must be reviewed/approved before release

Add a “version lock” setting at company and tag level to prevent deployment of any version other than the selected locked version

Our clients are requesting there be an option to remove the OS/platform filter in the Solutions view. This way, all vulnerabilities are visible in one list. I was told this would be a problem due to the high volume of findings that would go on the list but lists for assets and others are already interminably long. That's what the "Items per page" filter is for. Solutions are sorted by EPSS by default, and our clients focus heavily on that metric, so they would not be inundated by the data beyond the higher EPSS scores. Additionally, this feature is already technically available through a bug in the system which allows us to click on the Remediated Velocity tab, click the Pending Remediation Velocity tab, then back on the Solutions tab. Following this process removes the OS/platform filter, and the volume of findings does not cause any issues. Going through the process, on the other hand, does often cause the platform to freeze.