Patch Management / Remediation

A monthly report where we can review the status of devices over a specific period, for example, from the 1st day of the month through the last day of the month? I like to have a clear overview of all devices, preferably displayed in a graph, showing how devices move between status levels A through F during the month. Additionally, we would like to track how the risk score changes over time for audit purposes. Ideally, the report should also include, per client and per device: • What has already been patched • What still needs to be patched • The current device status • The risk score history or trend • A monthly summary in PDF format

If the scheduler is set to "no" for reboot after a scheduled OS patch. It may be helpful to have a pop up requesting a reboot, or just being able to schedule how long after a successful patch a device is rebooted automatically.

We have several clients with different internal patch policies (i.e. one might require critical server patches to be applied within 7 days, where another one will accept 21 days). I'd love to be able to enter these tolerances into the portal on a per-client basis (with there being a default in place), so we can easily report on any vulnerabilities that are outside of those thresholds. Then they can be manually addressed, risks accepted, etc. Importantly, multiple clients are regulated in the banking space, and they are being told that this level of reporting is required.

Provide a version-lock mechanism that allows selecting a specific app and choosing a version to roll back to. Use stored MSI uninstall commands to remove the bad version and reinstall the selected version.

Please add Microsoft Edge to the patch management as such this application has too many vulnerabilities impacting the exploitable risk.

Add a tab in the patch management screen to upload custom scripts that can be used to remediate a solution/vulnerability.

We often find ourselves going back and forth between ConnectSecure and our RMM tools to remove unwanted or deprecated products. Eg old .Net or C++ installations etc. It would be a huge time saver to work within the Solutions tab and have an Action to uninstall end of life apps.

ConnectSecure reports Microsoft ASP.NET Core 6.0 with version 48.88.905. This appears to be the MSI package internal build number (DisplayVersion in registry), not the human-readable product version (6.0.36) shown in DisplayName. Can the scanner be configured to display the product version (6.0.x) instead, or include both fields in reports? This would make vulnerability triage and patch matching significantly easier for our team.