See which of your clients' machines are past the 14-day update window
Free monitoring, for managed service providers, of the technical controls Cyber Essentials assesses. A small probe on each Windows or Linux machine reports what that machine says about itself. The portal shows every client’s machines in one place and keeps a dated record you can take to an assessment.
It costs nothing. Sign up in the portal.
What it checks
On Windows, once an hour:
- Security updates. How many days since the oldest missing critical or important update was released. Cyber Essentials allows 14.
- Operating system support. Whether the version and build are still supported.
- Antivirus. Which product, whether real-time protection is on, and how old its definitions are.
- Host firewall. Whether it is on, for each network profile.
- Administrator accounts. How many local accounts have admin rights. Counted, never named.
- Restart pending. Updates that are installed but not in effect until the machine restarts.
It also reports free disk space, memory, uptime and browser versions. A full disk is the commonest reason updates quietly fail to install.
Ubuntu and Debian machines are covered by a smaller set of checks. On Linux the update check counts pending security updates; it does not yet measure how old they are.
What it does not cover
- Windows and Linux machines only. No routers, firewall appliances, switches or other network devices.
- No MFA and no cloud services. Missing MFA on a cloud service that offers it is an automatic fail under the current question set, and this will not tell you about it.
- It reports what each machine says about itself. Someone with administrator rights on a machine could make it report anything. Every tool of this kind shares that limit: what you get is the machine’s own account of itself, not independent proof.
What an evidence pack is
A dated record of what a client’s machines reported over a period you choose: where each check started, every change along the way, and where it ended. If alerts were silenced during the period, the pack says so and gives the reason recorded at the time.
The date on each report is set by our server when the report arrives, not by the machine, so a machine with a wrong clock cannot rewrite the record. Reports are stored append-only.
A screenshot taken on assessment day shows one day. An evidence pack shows the months before it.
How the probe works
Outbound HTTPS only. No inbound ports, no remote control, and no ability to change anything on the machine. The probe reads raw values and sends them; the server decides what passes. How it works