p PatchFirst

For business owners and managers

Will you hear about a breach from a customer first?

Your contractor says everything is fine. What will you tell a customer if their data leaks? Send your engineer the free check link for a rating and highlighted stack without finding details. Known vulnerabilities and patch priorities are part of paid monitoring.

Share the check link with your engineer or contractor. Monitoring is paid. Annual billing saves 20%: one server for a year is $28.80 instead of $36.00. First 5 servers: $3.00 each per month; from server 6: $2.00; from server 26: $1.50.

A single assessment dial and three organized action blocks on a calm business dashboard.

Your engineer runs the servers. Your business faces the consequences.

A vulnerability is a known flaw in a program that someone could use in an attack. PatchFirst checks installed software against records of these flaws.

“I don’t want to hear about it from a customer or the news”

An exposed database or outdated software with a known flaw deserves attention before a complaint arrives. PatchFirst monitoring flags these findings so your engineer knows what to check first.

“Only one admin knows our servers. I have to take their word for it”

Your administrator or contractor knows the setup, but you cannot see the risks. Paid PatchFirst monitoring gives you a shared list of findings, priorities, and fixes to discuss.

“A partner asked about security. I have no answer”

A partner or customer wants to know how you look after your servers. PatchFirst ratings and detailed monitoring findings give you a basis for a specific answer: what was checked, what was found, and what you asked the team to fix.

A shared reference for the next conversation.

A score from 0 to 100 and a grade from A to F summarize the issues found. A higher score means fewer penalties for findings.

How to read the rating

A: 90–100 · B: 80–89 · C: 65–79
D: 50–64 · E: 35–49 · F: 0–34.

A P0 finding, the highest priority, caps the score at 49. A high average across your servers does not cancel out a serious finding on one of them.

What to discuss in the monitoring report

  • P0: what will we verify and address within a day?
  • P1: what is planned for this week?
  • Which findings are confirmed, and what needs a manual check?

The check does not need your customer records.

The agent collects a technical inventory of software and versions, not the contents of your business databases. No root (admin) access needed.

You keep control of server names

Before sending data, the agent replaces server names and other private values with labels. When name encryption is enabled, the name dictionary is encrypted separately. Your browser opens it using a separate names password that the service never receives.

The service can read the anonymized stack

Inventories and reports are stored in PostgreSQL in readable form for searching and recalculation. When name encryption is enabled, the owner seals the name dictionary separately. Backups use a separate key absent from the server; disk encryption is configured on the host.

You can leave names unset: the dashboard will show “Server 01”. You can also choose an alias such as web-1: it is stored openly. Do not enter a domain, IP address, company or customer name. For protection, enable name encryption in Account: your browser will move existing names into an encrypted dictionary and the service will delete the open copies.

Limitations

Your next step

Send the check link to your engineer.

Ask them to check one of your servers and bring back its rating, component names and installed versions with severity highlights, and general blind spots. Connect paid monitoring to see specific vulnerabilities and what to patch first.

Ongoing checks are part of paid monitoring. Annual billing saves 20%: one server for a year is $28.80 instead of $36.00. First 5 servers: $3.00 each per month; from server 6: $2.00; from server 26: $1.50. The agent updates inventory every 6 hours. View reports in your dashboard.