Bahrain, Saudi Arabia
SecTeerFind and fix vulnerable software before it is exploited
SecTeer makes VulnDetect, which finds vulnerable, outdated and unmanaged software on Windows devices and servers and helps patch it, and PatchPro, which delivers patches through Microsoft Intune.
- Agent or agentless
- A lightweight agent, or agentless through Microsoft Intune
- Exploited first
- Ranks findings by known exploitation (KEV), not by CVSS score alone
- No on-site servers
- No scanning servers or distribution points to run
- Windows estate
- Windows 10 and 11 devices and Windows Server
Patching problems SecTeer is built for
Most organisations patch Windows itself reasonably well. The gaps are usually in third-party software, unmanaged installs and prioritisation.
| Topic | What it can lead to | How SecTeer helps |
|---|---|---|
| Third-party applications fall behind | What it can lead to: Browsers, PDF readers, runtimes and utilities stay vulnerable even when Windows Update is current. | How SecTeer helps: VulnDetect inventories installed software on each device and flags missing patches for the operating system and third-party applications. |
| Software nobody manages | What it can lead to: Portable and unapproved applications run outside your management tools, often outdated and unseen. | How SecTeer helps: Optional shadow app discovery finds portable and unmanaged software running outside Intune, including end-of-life and insecure applications, and reports it into Intune. |
| Thousands of findings ranked by CVSS only | What it can lead to: Teams spend time on high-scoring issues nobody is exploiting while actively exploited ones wait. | How SecTeer helps: Findings are ranked by real-world exploitation signals, with known exploited vulnerabilities (KEV) flagged first, and grouped by the patch that fixes them. |
| Manual packaging and patching in Intune | What it can lead to: Updates are delayed while staff package, test and deploy them by hand. | How SecTeer helps: PatchPro ships operating system and third-party patches through Intune in staged rings, checks device health after each wave and rolls back patches that cause failures. |
| Laptops off the corporate network | What it can lead to: Remote devices miss scans and updates when they are not on the VPN. | How SecTeer helps: The agent reports over outbound HTTPS, so roaming devices stay covered without a VPN. |
| No clear evidence for auditors | What it can lead to: Hard to show what software is installed and how current it is. | How SecTeer helps: A software inventory, plus vulnerability and patch data you can export as audit evidence. |
What SecTeer does
SecTeer has two products that share one agent and one view of your software estate.
Vulnerability detection
VulnDetect re-inventories installed software and missing patches on a schedule you set, and matches findings to the actual devices where they were found.
Exploit-based prioritisation
Ranks vulnerabilities by evidence of real-world exploitation rather than a flat CVSS score, and groups them by fixing patch so one action can clear many findings.
Patching, with or without Intune
Patches the operating system and third-party applications through the SecTeer agent, or through Intune with PatchPro using staged rings, health checks and automatic rollback.
Shadow app discovery
An optional tool that detects portable and unmanaged applications outside Intune and flags end-of-life and insecure software.
Software deployment and blocking
Deploys and packages approved software, including custom line-of-business packages, and can block or remove unwanted applications.
Inventory and reporting
A central dashboard of software, vulnerabilities and patch status, with data you can export for audits.
VulnDetect or PatchPro: which do you need?
The two products answer different questions. Many organisations that manage devices in Intune use both.
| Topic | VulnDetect | PatchPro |
|---|---|---|
| What it does | VulnDetect: Finds vulnerable and missing-patch software across the operating system and third-party apps, and can patch it. | PatchPro: Delivers operating system and third-party patches through Intune in staged rings, using VulnDetect to find them. |
| How it runs | VulnDetect: A SecTeer agent deployed through Intune, Group Policy, an RMM tool or a script; or agentless through Intune. | PatchPro: Through your Microsoft Intune tenant. |
| Devices supported | VulnDetect: Windows 10 and 11; Windows Server 2016, 2019, 2022 and 2025 (2012 with limits). | PatchPro: Supported versions of Windows 10 and 11, Microsoft Entra ID joined or hybrid joined. |
| What you need in place | VulnDetect: Local admin rights to deploy the agent, and outbound HTTPS (TLS 1.2 or 1.3) to vulndetect.com. | PatchPro: Intune, and permission for PatchPro to read and write Intune apps. |
| A good fit when | VulnDetect: You need to see vulnerable software across all Windows devices and servers, whether or not they are in Intune. | PatchPro: You already manage devices in Intune and want third-party patching to run there. |
From SecTeer’s published system requirements. Check the current list with SecTeer before planning: macOS and Linux are not listed.
Before you deploy SecTeer
Useful for any patch management rollout, whichever tool you choose. Tick what is already in place: nothing you select is saved or sent.
How VirtuThinko helps you adopt SecTeer
- 01
Requirements
We can help you define what you need SecTeer to do, which systems are in scope and what a good result looks like.
- 02
Demo or proof of concept
We can help you run VulnDetect on a pilot group so you can see real findings from your own devices before deciding.
- 03
Design and deployment
We can help plan agent or Intune deployment, firewall rules, patch rings and how findings reach the people who fix them.
- 04
Tuning and handover
We can help you adjust settings to your environment, document the configuration and hand over to your team.
- 05
Ongoing support
Where you want it, we can help with day-to-day administration, reviews and changes as your environment grows.
No. SecTeer states that VulnDetect needs no on-premises scanning servers or distribution points. The agent communicates over outbound HTTPS, which also keeps roaming devices covered without a VPN.
Not for VulnDetect. The agent can be deployed through Group Policy, an RMM tool or a script, and can detect and patch without Intune. PatchPro is the product that delivers patches through Intune.
SecTeer’s system requirements list Windows 10 and 11 and Windows Server 2016, 2019, 2022 and 2025, with limited support for Server 2012. macOS and Linux are not listed.
CVSS describes how severe a vulnerability could be. SecTeer ranks findings by evidence that a vulnerability is being exploited, and flags known exploited vulnerabilities (KEV) first, so the most likely attack paths are fixed first.
SecTeer says it collects the software inventory and patch state it needs to run the service, and stores data in the EU. Check this against your data protection obligations before rollout.
SecTeer describes per-endpoint pricing with all features included and volume tiers for larger fleets. Quotes are given on request.
Explore SecTeer for your organisation
Tell us roughly how many Windows devices and servers you have, whether you use Microsoft Intune, and what slows your patching today. A member of our team will contact you to arrange an initial conversation.