WSUS alternative

Replace WSUS on your own servers.

Microsoft deprecated WSUS in September 2024 and points servers at Azure Update Manager. Gardience is the on-premises option: approve, schedule, and report on Windows and Linux patching from one console you run yourself. No Azure connection, no per-server monthly bill.

Start free trial   Book a 15-minute demo

What WSUS did, and what replaces it

The WSUS jobIn Gardience
Approve updatesTested patch sets, with two-person approval on the patch run
Computer groupsPilot and broad rings, groups, change windows, and locks
Report what is missingPending updates per machine, Windows and Linux in one view, with known-exploited CVEs flagged
Local downloadsA built-in update cache for Debian, Ubuntu, Rocky, AlmaLinux, and EPEL. Windows machines download from Microsoft.
Install and rebootReal patching with reboots handled, and every machine's result in a tamper-evident audit log

On-premises, even offline

Runs on your own server. Windows machines with no internet can be scanned against Microsoft's offline catalog, and the Linux cache can be exported and carried into a network with no internet.

Windows and Linux together

Windows Server 2016 to 2025, Windows 10 and 11, and the major Linux distributions, on one schedule with one approval and one report.

More than patching

A scored STIG and CIS-aligned baseline, drift repair, and CMMC Level 2 evidence on the same agents.

Flat yearly price

One price for the fleet, not per server per month. See pricing.

Proven at scale

1,020 Windows and Linux servers patched in 13 minutes in one approved run, every result in the audit log. See the proof.

How it compares

If...Then
everything runs in AzureAzure Update Manager
you already run MECM for desktops and have few serversextend MECM
you run Windows and Linux on-premises, care about cost at scale, or have isolated networksGardience

The full comparison: WSUS deprecated: a replacement for Windows and Linux. For Linux downloads: WSUS for Linux.

Questions

Is WSUS going away? It is deprecated, not removed: it keeps working but gets no new features. Move on your own schedule.

Do I need Azure? No. Gardience runs entirely on your own server, including networks with no internet.

Can I try it on my own machines? Yes. The free license covers 10 machines with no time limit, and the trial covers the full product.

Start free trial   Patching in detail