We run the control plane so you stay focused on the patches that matter.
We isolate your data, run the updates, and watch the uptime so you can focus on your fleet. Each customer gets a dedicated, isolated PatchMon service in the region you choose (UK, Germany, France, or US), hosted on ISO 27001 and BSI C5 Type 1 certified infrastructure. From $1/host/month with a 14-day trial.
Starter $1 (monitoring), Plus $2 (patch deployment + Docker), Max $3 (compliance scanning + browser SSH/RDP) per host per month. Full comparison →
How it works
From signup to monitoring your first host in under five minutes.
Pick a tier and host count
Starter, Plus, or Max. Pay for exactly the hosts you run at a transparent per-host rate in USD, GBP, or EUR. No minimums.
Sign up and your instance spins up
Your own PatchMon deployment is provisioned in under two minutes. You get your own subdomain in your chosen region (e.g. yourcompany.eu-west-2.patchmon.cloud) and fully isolated data storage.
Install agents on your hosts
Same one-line curl install as self-hosted, pointed at your cloud instance. Linux, FreeBSD, and Windows agents connect outbound over WebSocket.
You are live
Dashboard, patching, compliance scanning, remote access, alerting - all managed. We handle updates, backups, and monitoring. You focus on your infrastructure.
What you get
Every Cloud tier runs the same PatchMon product; Starter, Plus, and Max scale features, limits, and support (see Pricing for the matrix). These are the managed services we operate so you do not have to.
Your Own Isolated Instance
Each customer gets their own dedicated, isolated PatchMon service. Traffic is routed to your instance by hostname, and your data is never co-mingled with other customers.
- Dedicated per-customer service - not a shared multi-tenant app
- Regional subdomain (e.g. yourcompany.eu-west-2.patchmon.cloud), or bring your own domain like patchmon.yourcompany.com on Plus and Max
- Transparent per-host pricing. No minimum host count, no contracts on monthly plans
- Hostname-based routing to the correct instance
Your Own Instance, Your Own Data
Isolation is enforced at the subscription level. Each customer gets their own data store, their own credentials, and all traffic flows over your dedicated hostname.
- Per-customer data store with separate credentials
- TLS everywhere - agent connections, browser, and internal traffic
- IP allowlisting on Plus and Max subscriptions
- No co-mingling of data, ever
Automated Backups and Recovery
We back up your database on a schedule that matches your tier. Your data is always recoverable, and you can export it at any time.
- Daily backups included on every tier
- Retention scales with tier (30, 90, 365 days)
- Full data export available at any time via API or dashboard
- Standby restore available on request
Automatic Updates
New PatchMon versions are deployed to your instance with zero downtime. No manual steps, no breaking changes to worry about.
- Server updates handled by us - you always run the latest stable release
- Zero-downtime deployments
- Agent updates are independent - update agents at your own pace
Monitoring and Uptime
We monitor your instance around the clock. Automated health checks detect issues and restart services when needed. Infrastructure runs on IONOS Cloud (ISO 27001 and BSI C5 Type 1 certified).
- 24/7 instance monitoring with automated health checks
- Automated restart on failure
- Infrastructure-level monitoring independent of your PatchMon alerting
- Status notifications for planned maintenance windows
Support by Tier
Every tier includes documentation and guides. Direct support channels scale with your plan.
- Starter: Email, Discord
- Plus: Email, Slack, Discord
- Max: Email, Slack, Discord, Phone
- Volume and MSP engagements: bespoke support scoped to your fleet
Your data stays yours
No vendor lock-in. Your data is stored in standard, open formats and you can export it anytime. Move to self-hosted Community or another environment when it suits you, portable from day one.
- Full data export available at any time via API or dashboard
- Open APIs and documented agent protocol: no black-box appliance
- If you cancel, we provide a complete data export before account closure
Security
Outbound-only agents, TLS everywhere, and per-customer data isolation, plus infrastructure hardening and monitoring we apply on your behalf in Cloud.
Outbound-only agents
Agents connect outbound over WebSocket. No inbound firewall rules needed on your monitored hosts.
Encryption in transit
All communication uses TLS - agent connections, browser access, and API requests. No data travels in the clear.
Per-customer data isolation
Your data lives in its own isolated store with separate credentials. Not a row-level filter on a shared database.
Credentials stored encrypted
Agent credentials are stored with strong one-way hashing. Sensitive configuration (AI keys, notification secrets) is encrypted at rest with per-instance keys.
Infrastructure and regions
Cloud infrastructure runs on IONOS Cloud, an EU-headquartered provider certified to ISO/IEC 27001 and BSI C5 Type 1. You choose your region at signup.
United Kingdom
UK
Germany
DE
France
FR
United States
New York
Hosted on IONOS CloudEU-headquartered, ISO/IEC 27001 certified, BSI C5 Type 1 attested, and operating data centres on 100% renewable energy. The Worcester UK facility is Uptime Institute Tier IV certified.
Cloud tiers at a glance
Each tier charges a transparent per-host rate. No minimums. Features expand as you move up: Starter monitors, Plus patches, Max adds remote access, compliance, and AI.
| Starter | Plus | Max | |
|---|---|---|---|
| Users | Up to 3 | Unlimited | Unlimited |
| Support channels | Email, Discord | Email, Slack, Discord | Email, Slack, Discord, Phone |
| Manual patch runs | No | Yes | Yes |
| Docker monitoring | No | Yes | Yes |
| Browser SSH / RDP | No | No | Yes |
| Compliance scanning | No | No | Yes |
| AI terminal assistant | No | No | Yes |
| Custom branding | No | Yes | Yes |
| Per-host rate (monthly) | $1 / £1 / €1 | $2 / £2 / €2 | $3 / £3 / €3 |
Per-host rates are nominal across currencies ($1 = £1 = €1 on Starter). Annual billing is 10x monthly (2 months free). Pay for exactly the hosts you run, no minimums.
Cloud FAQ
Is my data stored separately from other customers?
Yes. Each customer gets their own isolated data store with separate credentials, routed to by hostname. Your data is never co-mingled with other customers.
Can I use my own domain?
Yes. Every tier includes a regional PatchMon subdomain (for example, yourcompany.eu-west-2.patchmon.cloud) that works out of the box. On Plus and Max you can also bring your own hostname - typically something like patchmon.yourcompany.com - by pointing a CNAME at your regional subdomain. We issue and rotate the TLS certificate for the custom hostname, and your regional subdomain keeps working alongside it. Contact us to set it up.
Is my workspace subdomain used to send email?
No. Your workspace subdomain (for example, yourcompany.eu-west-2.patchmon.cloud) is inbound-only. Agents connect out to it over TLS, and your team browses to it - nothing is ever sent from it. Alert emails and scheduled reports are delivered from a separate, dedicated sender domain, with your workspace name used only as the localpart so you can tell which workspace an alert belongs to (for example, from yourcompany@alerts.patchmon.cloud). This means your workspace hostname has no mail reputation exposure and is not a shared-deliverability risk.
How are workspace names handled? Can someone squat on my company name?
You choose your own workspace name at signup and you must be lawfully entitled to use it. Several hundred globally recognised trademarks, brands, and protected names are pre-reserved and cannot be registered through self-serve signup - they are released only to the verified rights holder. On top of that, we operate an anti-squatting policy: we may reclaim or rename any workspace that infringes on a third party's trademark, impersonates an organisation, or is being held speculatively, and we will act on legitimate complaints from rights holders. If a workspace is reclaimed, the underlying account, data, and service remain intact. See our Terms of Service for the full policy.
What happens if I outgrow my tier?
Upgrade seamlessly. Your instance, data, and configuration stay exactly as they are. Upgrades prorate to the new per-host rate immediately; downgrades take effect at the end of the billing period. No data migration required.
Where are Cloud instances hosted?
Cloud instances run on IONOS Cloud. IONOS SE is headquartered in Germany, certified to ISO/IEC 27001 and BSI C5 Type 1, operates EU data centres on 100% renewable energy, and is subject to EU data protection law. You choose your region at signup: United Kingdom, Germany, France, or United States (New York).
Is there a free trial?
Yes. All Cloud tiers include a 14-day free trial. Card required at signup, but you can cancel anytime before the trial ends with no charge.
What is the difference between Cloud and self-hosted?
With Cloud we operate the server: automatic updates, scheduled backups, uptime monitoring, layered IP controls, and tiered support, so you are not on call for the patch-management control plane. Self-hosted Community is available under AGPLv3 if you prefer to run it yourself.
Book a demo
15-minute call, no sales pitch. We'll show you the dashboard, agent deployment, and answer your questions.
Iframe blocked? Book directly at cal.com/9-technology-group/patchmon-demo.
Ready to start patching?
Spin up your own managed instance in under two minutes with a 14-day free trial.