CyberIndexBeta

Product

Automated patching of operating systems and third-party and proprietary software, with asset inventory, from the Heimdal endpoint suite. It runs on Linux, macOS and Windows. It is delivered as a hosted SaaS service. Among the capabilities recorded for it are application patching, automated patch deployment, central management console and local patch repository. Its record also notes multi-tenant (msp) management, operating system patching, patch compliance reporting and patch rollback.

Current Version
Cloud service · no version
Market
EnterpriseMid-MarketService Provider
Licence
Paid
Price
Paid · price unknown
Record Created
2026-10-04
Last Updated
2026-10-20

Vendor

Heimdal is a Danish security company based in Copenhagen that sells a single unified platform to organisations, mostly mid-sized ones and through managed service providers. It is younger than most vendors here and grew from one idea — stopping threats at the DNS and patch layer, before anything needs to be detected on the endpoint — into a broad suite. The range is modular and each module carries the company name: Heimdal DNS Security, Heimdal Patch & Asset Management, Heimdal Application Control, Heimdal Ransomware Encryption Protection, Heimdal Email Security and Heimdal Email Fraud Prevention, with Heimdal Privilege Elevation & Delegation Management and Heimdal Privileged Account & Session Management covering administrative rights. Detection and response run from Heimdal Endpoint Detection & Response up through Heimdal XDR and the managed Heimdal MXDR. Its positioning is European compliance — NIS2, GDPR, ISO 27001 — and prevention rather than detection, which is worth bearing in mind when comparing it here: much of what it sells is designed to act before the point at which a detection test measures anything. Vendor page →

Country
Denmark
Headquarters
Copenhagen, Denmark
Year Established
2014
Customers
15K organisations
Users
3M devices protected
Revenue
≈ $3.7M (2025)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise primaryMid-Market primaryService Provider secondary

Capabilities

Application Patchingkeynative
Operating System Patchingkeynative
Automated Patch Deploymentkeynative
Vulnerability-Based Prioritisationkeynative
Patch Rollbackkeynative
Phased / Ring Deploymentnative
Roaming Endpoint Patchingkeynative
Patch Compliance Reportingnative
Reboot Managementnative
Software Deploymentnative
Vulnerability ShieldingNot known
Central Management Consolenative
Air-Gap Operationkeynot supported
Local Patch Repositorypartial
Agentless Patchingkeynot supported
Multi-Tenant (MSP) Managementkeynative

1 of 16 not yet known — not recorded, which is not the same as not supported.

Specifications

Third-Party Applications Supported350+ applications

1 other specification for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummarySubscriptionnot statedno recurring chargeNot known

Versions

A cloud service: the vendor runs it, so there is no version for customers to install or upgrade.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-10-04. Everything below is what has changed since.

  • 2026-10-20Product updatedSold to: Enterpriseevidence
  • 2026-10-20Product updatedAlso sold to: Service Providerevidence
  • 2026-10-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-10-20Product updatedSold to: Mid-Marketevidence
  • 2026-10-09Pricing plan addedPrice: subscriptionevidence
  • 2026-10-08Capability addedAir-Gap Operation: not supportedevidence
  • 2026-10-06Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-10-06Capability addedMulti-Tenant (MSP) Management: built inevidence
  • 2026-10-05Capability addedAgentless Patching: not supportedevidence
  • 2026-10-05Capability addedLocal Patch Repository: limitedevidence
  • 2026-10-05Capability addedCentral Management Console: built inevidence
  • 2026-10-05Capability addedReboot Management: built inevidence
  • 2026-10-05Capability addedPhased / Ring Deployment: built inevidence
  • 2026-10-05Capability addedPatch Rollback: built inevidence
  • 2026-10-05Capability addedVulnerability-Based Prioritisation: built inevidence
  • 2026-10-05Capability addedOperating System Patching: built inevidence
  • 2026-10-05Capability addedPatch Compliance Reporting: built inevidence
  • 2026-10-05Capability addedRoaming Endpoint Patching: built inevidence
  • 2026-10-04Capability addedSoftware Deployment: built inevidence
  • 2026-10-04Capability addedAutomated Patch Deployment: built inevidence
  • 2026-10-04Capability addedApplication Patching: built inevidence
  • 2026-10-04Platform addedRuns on Linuxevidence
  • 2026-10-04Platform addedRuns on macOSevidence
  • 2026-10-04Platform addedRuns on Windowsevidence
  • 2026-10-04Product createdNew product, listed in Patch Managementevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.