Vendors / Rapid7 / Active Patching

<Automatic patching (with Automox)>

Rapid7 Active Patching

Fix vulnerabilities automatically with patches and configurations, straight from Exposure Command. Built on the Automox platform.

What is Active Patching?

Active Patching is a feature within Exposure Command that fixes vulnerabilities automatically. Rapid7 introduced it in July 2025. It runs on the platform of Automox, which Brandaris already works with.

Where Exposure Command shows what is vulnerable, Active Patching makes sure it actually gets fixed.

What it delivers

  • Automatic remediation: patches and configurations on many devices at once, without manual work.
  • Priority with context: first the vulnerabilities on business-critical systems.
  • Virtual patches: protect systems for which no update exists yet.
  • Broad coverage: Windows, macOS and Linux, including third-party software.
  • Closed loop: you see whether patches have really been rolled out and vulnerabilities fixed.

How Brandaris uses Active Patching

We combine the insights from Exposure Command with automatic patching. That way we are not always playing catch-up. If you do not use Exposure Command, we set up patch management with Automox itself.

<frequently asked questions>

About Active Patching

What is Rapid7 Active Patching?

Fix vulnerabilities automatically with patches and configurations, straight from Exposure Command. Built on the Automox platform.

What is the difference with Automox?

Active Patching is built on Automox, but is controlled from Rapid7 Exposure Command. That way you patch based on the risks Rapid7 sees.

What are virtual patches?

Settings that protect a system against a known attack, even when no update exists yet. That keeps you protected until the real update is available.

Do we need Exposure Command?

For Active Patching, yes. Without Exposure Command we set up patch management with Automox itself.

Can Brandaris set up and manage Rapid7 Active Patching for us?

Yes. We first look at what is already there and what you need. Then we help with implementation, setup and follow-up, or take over the management. We make clear up front what it costs.

Does Active Patching suit your organisation

We first look at what is already there, and tell you honestly what you need.

<more from rapid7>

Other Rapid7 solutions

<newsletter>

Our newsletter

Cybersecurity is not just technology. It is people work. In our newsletter we share knowledge, stories and experiences that show how we help organisations move forward. The newsletter is in Dutch.