--- title: "12 of 20 patch tools are quote-only, and only 9 patch apps on Linux too" summary: "TechBag’s count of 20 RMM and patch products on price, Linux and third-party catalogues, the breach statistic behind the why, and the 2022 five, as of September 2026." url: https://www.thetechbag.com/blog/patch-management-benefits-best-tools format: Analysis desk: "Endpoints & devices" published: 2024-12-10 facts_checked: 2026-09-30 author: TechBag (The TechBag Journal) tags: ["patch management","RMM","third-party patching","Linux","NinjaOne","Action1","ManageEngine","SuperOps","Verizon DBIR","CERT-In","RBI","DPDP","GST"] cover: https://www.thetechbag.com/blog/covers/patch-management-benefits-best-tools.png --- # 12 of 20 patch tools are quote-only, and only 9 patch apps on Linux too *TechBag’s count of 20 RMM and patch products on price, Linux and third-party catalogues, the breach statistic behind the why, and the 2022 five, as of September 2026.* Analysis · Endpoints & devices · By TechBag · Published 2024-12-10 · Facts checked 2026-09-30 · Canonical: https://www.thetechbag.com/blog/patch-management-benefits-best-tools The short version - Of the 20 RMM and patch products on TechBag’s guide, 12 are quote-only. The eight that publish a price run from Splashtop’s stated ceiling of under US$1 an endpoint a month to US$3.75 at NinjaOne’s smallest tier; Action1 is free for the first 200 endpoints.[1] [3] [4] - Eleven of the 20 document Linux patching, and only 9 carry a curated third-party application catalogue across Windows, macOS and Linux; 10 stop at Windows and macOS, and one patches through package managers.[1] - The reason to care is now a number: vulnerability exploitation was the first step in 31% of breaches in Verizon’s 2026 report, the most common initial access for the first time in nineteen years.[2] [17] Our March 2022 post on patch management listed four benefits and five tools. The benefits were security, uptime, compliance and “product innovation”; the tools were Automox, LogMeIn Central, Patch My PC, NinjaOne and Acronis Cyber Protect Cloud. The question an Indian IT manager actually brings to us is narrower: which tool patches what I run, what does it cost per endpoint in rupees, and will it satisfy the auditor. So we counted the 20 products on TechBag’s RMM and patch guide on exactly those lines, and went back to the 2022 five. TechBag is an authorised NinjaOne partner; read the price section with that in mind. ## Why patch, in one number: 31% Verizon’s 2026 Data Breach Investigations Report, covering incidents from 1 November 2024 to 31 October 2025, found that exploitation of a vulnerability was the first step in 31% of breaches, overtaking stolen credentials as the most common initial access for the first time in the report’s nineteen years.[2] [17] A vulnerability that is exploited is, by definition, one that was known and unpatched on the day. The 2022 post called this “security issues”. It is now the single largest door. 31% of breaches in Verizon's 2026 report began with an exploited vulnerability, the most common first step for the first time in nineteen years Verizon's global dataset, incidents from November 2024 to October 2025; not Indian incidents. **Figure: The patch cadence is no longer yours to set: three Indian clocks** *Reporting and testing intervals in Indian regulation, as of September 2026* 6 hours Window to report a cyber incident to CERT-In CERT-In Directions, 28 April 2022 6 months Vulnerability assessment interval for banks' internet-facing systems RBI Directions, 31 July 2026 12 months Penetration test interval for the same systems RBI Directions, 31 July 2026 Source: CERT-In Directions 2022; RBI Directions 2026 via practitioner summary · as of 30 September 2026 The first two tiles are why “compliance” moved from a benefit to a constraint. A bank that finds a critical vulnerability in its six-monthly assessment and cannot show it was fixed has an audit finding; a company that is breached through it has six hours to tell CERT-In.[13] [14] The patch tool is the evidence either way, which is why reporting is the fourth stage below and not an afterthought. ## What the tool has to do: four stages, not one button Every product on the guide describes itself as “automated patching”. What separates them is how many of the four stages they do on every operating system you run. The 2022 post’s checklist, “Windows, Linux and Mac; PCs, laptops and servers; automation; real-time reports”, was the right list; the tags on TechBag’s guide are those four items made testable.[1] **Figure: Patching is a pipeline: detect, approve in rings, deploy in a window, prove it** *The four stages TechBag tags every RMM and patch product against, August 2026* 1. 011. Inventory and detectEvery device, every OS, every third-party application, and which of them is missing what. The gap most tools hide is the application catalogue. 2. 022. Approve in ringsA pilot group gets the patch first; the fleet follows after a set interval. The CrowdStrike update of 19 July 2024 is the case for rings. 3. 033. Deploy in a windowMaintenance windows per site or client, reboot handling, failed-patch retries, and a rollback when the patch itself breaks something. 4. 044. Prove itA compliance report an auditor accepts: which devices are current, which are not, and why. This is the artefact the six-monthly RBI assessment asks for. Source: TechBag RMM & Patch guide, architecture section · as of 30 September 2026 Stage one is where the money is. Operating-system patches are a solved problem on every product here. Third-party applications, browsers, PDF readers, Java runtimes, video-call clients, are where the exploited vulnerabilities live, and the products split three ways on how they handle them: a curated catalogue the vendor maintains across Windows, macOS and Linux; a catalogue for Windows and macOS only; or a hand-off to package managers such as WinGet, Chocolatey, Homebrew and APT, which is Atera’s approach.[1] ## Price: 12 of 20 quote, 8 publish, two vendors give it away Twelve of the 20 products are quote-only, including every ConnectWise, Datto, N-able and Qualys entry and LogMeIn Central.[1] Eight publish something. Six of those publish a number you can multiply: SuperOps at US$1.50 an endpoint a month on its internal-IT plans with a 100-endpoint floor, falling to US$1.20 above 1,000; ManageEngine Endpoint Central at the equivalent of US$1.33 to US$2.83 an endpoint a month, sold per 50 endpoints a year; NinjaOne at a published band of US$3.75 a device a month at 50 or fewer endpoints down to US$1.50 at 10,000, with the exact rate quoted; and Atera at US$149 a technician a month for unlimited devices.[5] [6] [4] [7] Splashtop AEM states a ceiling of “under US$1” with a 100-endpoint minimum; LogMeIn Resolve draws its per-endpoint figure in the browser.[1] **Figure: Published patch pricing runs from free to US$3.75 an endpoint a month; 12 of 20 products will only quote** *Published per-endpoint list price, US$ per month, five RMM and patch products, September 2026* Action1, first 200 endpoints free, no feature limits US$0 Splashtop AEM vendor ceiling: under US$1 US$1 ManageEngine Endpoint Central, from US$1.33 SuperOps, at 100 endpoints US$1.5 NinjaOne, 50 or fewer endpoints US$1.50 at 10,000 US$3.75 | | Value (US$) | | --- | --- | | Action1, first 200 endpoints | 0 | | Splashtop AEM | 1 | | ManageEngine Endpoint Central, from | 1.33 | | SuperOps, at 100 endpoints | 1.5 | | NinjaOne, 50 or fewer endpoints | 3.75 | Source: Vendor pricing pages (Action1, SuperOps, NinjaOne) and TechBag's ManageEngine and Splashtop pages · as of 30 September 2026 · Action1 is free to 200 endpoints and quoted above; NinjaOne shows its highest published tier; Atera (US$149 a technician) is omitted as a different unit Two free tiers change the arithmetic for a small company. Action1 is free for the first 200 endpoints with no feature limits, then priced per endpoint on an annual Growth plan plus a support subscription; ManageEngine Endpoint Central’s free edition stops at 25 endpoints.[3] [6] A 150-device company can therefore patch Windows, macOS and Linux for nothing on Action1 today, and the question becomes whether it also needs the ticketing and remote control an RMM adds. TechBag countTechBag count Of 20 products from 12 vendors: 12 quote-only, 8 with a published price or band, 6 with a number you can multiply, and 5 with a free tier, all from two vendors (the four Action1 modules and ManageEngine). Fifteen are priced per device, four are free-then-per-endpoint (the Action1 modules), one is per technician.[1] ## Coverage: 11 patch Linux, 9 carry a cross-OS catalogue Eleven of the 20 document Linux patching, meaning the tool deploys Linux updates rather than merely offering a remote shell to a Linux box.[1] Nine do not, and the nine include products a Windows-first buyer would never suspect: Splashtop AEM, LogMeIn Central and Resolve, TeamViewer Remote Management, both ConnectWise products and Datto RMM. If your estate has twenty Ubuntu servers, that list is eliminated before the demo. **Figure: Only 9 of 20 patch tools carry a curated third-party catalogue across Windows, macOS and Linux** *Third-party application patching mechanism, share of 20 RMM and patch products (five squares a product), vendor documentation August 2026* 45% Curated catalogue, Windows + macOS + Linux 9 of 20 50% Curated catalogue, Windows + macOS only 10 of 20 5% Package managers (WinGet, Chocolatey, Homebrew, APT) 1 of 20: Atera Source: TechBag RMM & Patch guide, third-party mechanism tag · as of 30 September 2026 The catalogue is the test to run in the trial. Write down the twenty applications your users actually have installed, then check each one against the vendor’s list. NinjaOne’s catalogue is the broadest on the guide; SuperOps’s is thinner; and Action1’s macOS catalogue is about 30 applications against a far longer Windows one.[1] A miss on that list is not a gap in the demo. It is a device someone patches by hand, every month, forever. Our view Our view: for a mixed estate, shortlist from the nine cross-OS catalogue products and nothing else. For a Windows-only office with Macs for the designers, the ten are fine and the price section decides. The package-manager route works when a technician will own it; it is not a set-and-forget catalogue. ## The 2022 five, four years on Two of the five tools we recommended in 2022 are not on TechBag’s guide at all, and we say so rather than rate them. Of the three that are, one is quote-only with no Linux, one publishes a band and became a Gartner Leader, and one sells patching as an add-on pack to a backup product. **Figure: Of the 2022 five, one is now a Gartner Leader with a published band, one is quote-only without Linux, two are unassessed** *The March 2022 shortlist against each product's documented standing, September 2026* As pitched in March 2022 - Automox: closes the attack aperture by more than 80% - LogMeIn Central: remote access, patching, automation in one - Patch My PC: automated third-party patching for enterprises - NinjaOne: #1-rated ease of use, quickest implementation - Acronis Cyber Protect Cloud: backup, anti-malware and patching in one Documented standing, September 2026 - Automox: not assessed on TechBag's guide; the 80% claim was the vendor's and is not repeated - LogMeIn Central: still sold, quote-only per device; Windows and third-party patching, no Linux, no PSA - Patch My PC: not assessed on TechBag's guide - NinjaOne: published US$1.50 to US$3.75 a device a month; Leader, Gartner Magic Quadrant for Endpoint Management Tools, 5 January 2026 - Acronis Cyber Protect Cloud: patching is the Advanced Management pack on a backup base, sold per client through providers Source: TechBag RMM & Patch guide and product pages; NinjaOne press release, 7 January 2026 · as of 30 September 2026 LogMeIn Central is the instructive one. It is a mature Windows-fleet manager with genuine remote-access depth, and its patching is competent for Windows and third-party applications; it has no documented Linux patching, no mobile management and no PSA, and it is quote-only.[8] In 2022 it was a reasonable all-in-one. In 2026 a patch-first buyer gets more coverage for a published price from Action1 or NinjaOne, which is what the guide says and what we say here. NinjaOne, for its part, publishes a band and quotes the exact rate, and was named a Leader in Gartner’s Magic Quadrant for Endpoint Management Tools dated 5 January 2026; TechBag is an authorised NinjaOne partner, so weigh that sentence accordingly.[4] [10] Acronis is a different purchase: a provider buys the backup base and adds the Advanced Management pack for patching and RMM per client, so it suits an MSP that already sells Acronis backup more than an IT team buying a patch tool.[9] If you are buying this in India In rupees, at ₹83 to the dollar and before GST, SuperOps’s US$1.50 is about ₹125 an endpoint a month, ManageEngine’s US$1.33 about ₹110, NinjaOne’s band about ₹125 to ₹311, and Action1 is ₹0 until the 201st endpoint; every invoice adds 18% GST.[5] [6] [4] [3] Where the console runs matters as much as the price. ManageEngine is Chennai-headquartered with data centres in Chennai and Mumbai and a full on-premises edition; Action1 committed to Indian data residency by 1 April 2026 and TechBag could not find it live by September 2026; NinjaOne’s approved sub-processors list hosting on AWS in the USA, Canada, Germany and Australia; SuperOps hosts in the US or Europe.[6] [11] [12] [1] Three obligations set the cadence. The **CERT-In Directions of 28 April 2022** require incident reporting within six hours and 180 days of logs within Indian jurisdiction, and a patch tool’s deployment log is part of that record.[13] The **RBI’s Cybersecurity, Technology Risk and Resilience Framework Directions of 31 July 2026**require banks to run a vulnerability assessment every six months and a penetration test every twelve on internet-facing systems; the patch compliance report is the evidence that findings were closed.[14] The **DPDP Rules**, notified on 13 November 2025, bring the security-safeguard duties into force on 13 May 2027, and the 2023 Act’s schedule sets penalties of up to ₹250 crore for failing to keep reasonable safeguards; an unpatched known vulnerability is the simplest failure of that test to prove.[15] [16] How we did this Figures as of 30 September 2026 All counts are TechBag’s, from the 20 product rows on the RMM and patch decision guide (12 vendors). Each row’s tags (documented Linux patching, third-party mechanism, pricing model, free tier, on-premises option) were set from vendor documentation on 22 August 2026; remote control to a Linux device does not count as Linux patching. “Published” means a figure or band printed on the vendor’s own pricing page; “a number you can multiply” excludes a ceiling (Splashtop) and a figure drawn only in the browser (LogMeIn Resolve). Prices were read from Action1 (August 2026), NinjaOne and SuperOps (mid-2026), and Atera (September 2026) and from TechBag’s ManageEngine page; INR uses ₹83 to the dollar. The breach statistic is Verizon’s 2026 DBIR as summarised by Descope and Help Net Security; the report PDF was not fetched. The RBI Directions are cited through a practitioner summary. Automox and Patch My PC are not on TechBag’s guide and are not rated. Spotted an error? Write to us; corrections are published at the foot of the piece. Sources 1. [TechBag, RMM & patch management decision guide: 20 products, Linux-patching, third-party-mechanism, pricing-model and free-tier tags; cost table at 200 / 500 / 2,000 endpoints](https://www.thetechbag.com/browse/endpoint-management/rmm-patch) — vendor-doc verified 22 August 2026 2. [Descope, summary of the Verizon 2026 Data Breach Investigations Report (vulnerability exploitation 31% of breaches, the leading initial access vector)](https://www.descope.com/blog/post/verizon-dbir-2026) — 21 July 2026 Report PDF not fetched. 3. [Action1, pricing (free for the first 200 endpoints with no feature limits; Growth plan per endpoint plus support subscription above)](https://action1.com/pricing) — verified August 2026 4. [NinjaOne, pricing (US$3.75 per device per month at 50 or fewer endpoints to US$1.50 at 10,000; exact rate quoted)](https://www.ninjaone.com/pricing/) — mid-2026 5. [SuperOps, pricing (internal-IT plans US$1.50 per endpoint per month at the 100-endpoint minimum, US$1.20 above 1,000; MSP plans per technician)](https://superops.com/pricing) — verified 22 August 2026 6. [TechBag, ManageEngine Endpoint Central page (US$1.33 to US$2.83 per endpoint per month equivalent, per 50 endpoints a year; free to 25; Chennai and Mumbai data centres; on-premises)](https://www.thetechbag.com/manageengine/manageengine-endpoint-central) — mid-2026 7. [Atera, pricing (Professional US$149 per technician per month, unlimited devices, annual; Expert US$189, Master US$219)](https://www.atera.com/pricing/) — read 30 September 2026 8. [TechBag, LogMeIn Central page (quote-only per device; Windows and third-party patching; no Linux, no mobile, no PSA)](https://www.thetechbag.com/goto/goto-central) — mid-2026 9. [TechBag, Acronis Cyber Protect Cloud page (Advanced Management pack for patching and RMM on the backup base, per client)](https://www.thetechbag.com/acronis/acronis-cyber-protect-cloud) — mid-2026 10. [NinjaOne, press release: a Leader in the Gartner Magic Quadrant for Endpoint Management Tools (report dated 5 January 2026)](https://www.ninjaone.com/press/leader-2026-gartner-magic-quadrant-mq/) — 7 January 2026 11. [TechBag, Action1 vendor hub (Indian data residency committed for 1 April 2026; not yet delivered)](https://www.thetechbag.com/action1) — September 2026 12. [NinjaOne, approved sub-processors (AWS hosting: USA, Canada, Germany, Australia)](https://www.ninjaone.com/approved-subprocessors) — undated page 13. [CERT-In, Directions under section 70B(6) of the IT Act, 2000 (six-hour reporting; 180-day logs within Indian jurisdiction)](https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf) — 28 April 2022 14. [RBI, Commercial Banks – Cybersecurity, Technology Risk and Resilience Framework Directions, 2026 (six-monthly VA, annual PT on internet-facing systems), via practitioner summary](https://taxguru.in/rbi/rbi-issues-commercial-banks-cybersecurity-technology-risk-resilience-framework-directions-2026.html) — 31 July 2026 RBI PDF not fetched. 15. [DPDP Rules 2025, commencement timeline (notified 13 November 2025; safeguard and breach duties from 13 May 2027)](https://legismith.com/dpdp-rules-2025-timeline/) — 13 November 2025 16. [Digital Personal Data Protection Act, 2023, Schedule (penalties up to ₹250 crore)](https://www.meity.gov.in/data-protection-framework) — 11 August 2023 17. [Help Net Security, Verizon DBIR: vulnerability exploitation is the dominant initial access vector (incidents November 2024 to October 2025; first time credential theft lost the top spot in 19 years)](https://www.helpnetsecurity.com/2026/05/20/verizon-2026-dbir-findings/) — 20 May 2026 Related on TechBag: the [RMM and patch management guide](https://www.thetechbag.com/browse/endpoint-management/rmm-patch) holds the 20 rows counted here and the cost table at 200, 500 and 2,000 endpoints; the [Action1 Patch Management](https://www.thetechbag.com/action1/action1-patch-management) page covers the free tier; the [NinjaOne Patch Management](https://www.thetechbag.com/ninjaone/ninjaone-patch-management) page has the trial questions for the catalogue test. **Disclosure.** TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view. Go deeper on TechBag - [RMM and patch management guide](https://www.thetechbag.com/browse/endpoint-management/rmm-patch) — the 20 products counted here, with the cost table at 200, 500 and 2,000 endpoints - [Action1 Patch Management](https://www.thetechbag.com/action1/action1-patch-management) — free for the first 200 endpoints; the India-residency timeline - [NinjaOne Patch Management](https://www.thetechbag.com/ninjaone/ninjaone-patch-management) — the published band and the catalogue test to run in a trial