We're here
when you need us.

Download the Linux agent from the Downloads page (Debian/Ubuntu, RHEL/Rocky, or generic tarball), then run the one-line install with your org enrolment token: curl -sSL https://patchpilot.co.uk/agent-install.sh | sudo PP_TOKEN=<your-token> bash. The agent runs as a systemd service and checks in every 60 seconds. Full docs are at /downloads.

Per-device, per-month, all-in. That covers the agent itself, the dashboard, patch deployment, vulnerability scanning, compliance evidence (6 frameworks on Business), audit logs, remote terminal/file-transfer, and our UK helpdesk. No per-tech licences, no add-ons for "advanced" reporting, no charge for additional users. See /pricing for the tier breakdown.

Yes. All customer data — devices, patches, audit logs, telemetry — is stored in EEA-hosted Postgres (currently Hetzner FSN1, Frankfurt). UK customers can opt in to a UK-only data plane (London) on Business and Enterprise tiers. PatchPilot Ltd is registered with the ICO and we're listed as a sub-processor in our DPA at /dpa.

Any data subject (an end user whose device is enrolled) can submit a Subject Access Request through their organisation admin, who exports their data from Settings → Privacy → DSAR. We respond to direct DSARs at privacy@patchpilot.co.uk within 30 days as required by Article 12. Right-to-erasure requests are honoured within 7 days and trigger a deletion job that purges the device record, audit trail, and any backups (subject to legal hold).

The Enterprise tier ships a self-hosted control plane (Docker Compose or Kubernetes Helm chart) that you run inside your own network. The agent still talks to your on-prem instance over HTTPS, and you bring your own object storage for backups. Air-gapped deployments are supported with an offline patch sync mechanism — happy to discuss in a call.

The dashboard marks the device as "Stale" after 10 minutes without a check-in and "Offline" after 24 hours. While offline, the device queues commands locally; once it reconnects, queued commands run in order and the audit log is reconciled. You can configure alerts on offline duration in Settings → Notifications.

Every patch deployment goes through your configured maintenance window and ring strategy (e.g. Dev → Pilot → Production). PatchPilot watches the post-patch posture for 30 minutes and auto-pauses rollout if a ring fails. Rollback is one click for Windows MSU/MSI patches, and we keep snapshot metadata for 90 days so you can audit what changed.

Yes. The Free tier gives you up to 10 devices forever — full functionality, no credit card. Starter, Pro, Business, and Enterprise tiers include a 14-day free trial. Beta access opens 15th June 2026 — we're polishing a few final features so day one is rock-solid — with general availability following beta feedback. Sign up to the waitlist for early access.