PatchProof

PatchProof is a web app (with an optional lightweight desktop/agent component) that turns messy, manual patch reporting into verifiable evidence. It connects to common environments (Windows via WinRM, Linux via SSH, VMware vCenter, and major cloud VMs) and continuously collects patch state, reboot status, kernel versions, and CVE exposure. The core output is an auditor-ready “patch evidence pack” per system, per month: what was missing, what was applied, when it changed, and who approved it. It also flags drift (a server that silently fell behind), highlights exceptions with expiry dates, and generates change-ticket notes you can paste into ServiceNow/Jira. This is a combination traditional + AI app: AI is used to summarize risk, explain exceptions in plain English, and draft compliance narratives, but the underlying data is deterministic and defensible. It’s not a magic autopatcher; it’s proof and accountability.