HardenCoverage

Patch Compliance Report

Reports which devices are outside the patch window and by how many days, grouped by business unit.

Part of Patch window coordination

Tools

Microsoft Intune, Jamf, Jira Service Management

Outcomes

Overdue device list per team • Reboot backlog counted daily • Coverage visible without a site visit

Documentation

Instruction-ready detail below

<in:schedule>Every weekday at 7:30am</in:schedule>, list the devices past the patch window with the days overdue, and <jira>assign each one</jira> to the owning team with a restart date.

Instruction file

<in:schedule>Every weekday at 7:30am</in:schedule>, list the devices past the patch window with the days overdue, and <jira>assign each one</jira> to the owning team with a restart date.

Setup requirements

Tools

Microsoft Intune, Jamf, Jira Service Management

Trigger

Every weekday at 7:30am

Setup time

20 minutes

Other automations in this workflow

Emergency Patch Rollout

Pushes an out-of-band patch to internet-facing systems first and reports completion per host.

Mac Reboot Queue

Sorts the Macs waiting on a restart by site and business criticality, so one night clears the backlog.

Patch Dependency Order

Sorts a patch window so domain controllers, file servers and workstations restart in dependency order.

Related workflows

Vulnerability SLA tracking

Assigns every open finding an owner and a deadline, and escalates only the ones about to breach.

Vulnerability reports

Builds the periodic report from the scanners themselves, so every open finding carries an owner, a deadline and a visible status.

Backup verification

Restores a real file and a real service on a schedule, so a green job status stops standing in for a proven recovery.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download