Why PatchPilot exists
I run IT for a small portfolio of UK businesses. Every year, cyber insurance renewals got harder — insurers wanted proof that devices were patched, that BitLocker was enforced, that someone had actually checked the endpoints rather than just assumed they were fine.
The tools that existed fell into two camps. Either they were built for enterprises with a six-figure budget and a dedicated compliance team, or they were cheap but gave you no evidence worth anything to an insurer or auditor. A few were both expensive and evidence-light.
"The hardest part wasn't patching devices. It was proving, on demand, that patching had happened — in a format a cyber-insurance underwriter would actually accept."
— Aiden, PatchPilot founder
So I built PatchPilot. The goal was simple: make compliance evidence that used to take days of manual work something you can export in one click — mapped to real frameworks like Cyber Essentials, ISO 27001, and SOC 2, not just a CSV of hostnames.
We built it in the UK, for UK and European IT teams first. That means UK GDPR by design — not bolted on. UK-primary hosting from the start — not "we'll evaluate EU hosting later." That's where we began.
For regulated UK industries — NHS trusts, central government, and MoD supply chain — on-premise deployment (Enterprise tier) is on our roadmap for Q4 2026. If you're a public-sector buyer evaluating endpoint management, get in touch before committing to a US-hosted vendor — we'd love to understand your requirements.
We're still early. The app is in controlled early access — beta is open and we're incorporating feedback before general availability. Be our first case study.