CyberIndexBeta

Product

Ivanti Security Controls (formerly Ivanti Patch for Windows, originally Shavlik) is a self-hosted console that patches the OS and third-party applications on Windows workstations and servers, Linux machines and VMware virtual machines. Windows machines can be patched without an agent; Linux requires one. It can also turn a CVE list from another vulnerability scanner into a patch group. Ivanti Security Controls simplifies security with unified and automated prevention, detection, and response techniques that target your biggest attack vectors. With Ivanti Security Controls, patch management isn’t full of holes that could devastate your business. Patch REST APIs integrate Security Controls with other products, automate shared processes, and provide remote access and control. Supported platforms are Linux, Windows and Windows Server.

Current Version
2026.3.1
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-10-06
Last Updated
2026-10-20

Vendor

Ivanti was formed in 2017 from the merger of LANDESK and HEAT Software and has grown by acquisition since, into a company that manages and secures the devices an organisation owns: IT service management, endpoint management, patching and secure access, sold as the Ivanti Neurons platform. It is privately held and headquartered in Utah. Ivanti Antivirus, listed here, is a component of that endpoint management stack rather than a standalone product, bought by organisations already using Ivanti to deploy and patch their machines. One thing a buyer should factor in. Through 2024 several serious vulnerabilities in Ivanti's remote access appliances were exploited in the wild and prompted emergency directives from national cyber security agencies. The company has since published a security programme in response. That history concerns the appliance products rather than the endpoint agent listed here, but it belongs in any assessment of the vendor. Vendor page →

Website
ivanti.com
Country
United States
Headquarters
South Jordan, United States
Year Established
2017
Customers
40K organisations
Users
200M devices protected
Revenue
$1.0B (2023)

Platforms

Linuxnative
Windowsnative
Windows Servernative

Target Market

Enterprise primary

Capabilities

Application Patchingkeynative
Operating System Patchingkeynative
Automated Patch Deploymentkeynative
Vulnerability-Based Prioritisationkeynative
Patch Rollbackkeypartial
Phased / Ring DeploymentNot known
Roaming Endpoint Patchingkeynative
Patch Compliance Reportingnative
Reboot Managementnative
Software Deploymentnative
Vulnerability ShieldingNot known
Central Management Consolenative
Air-Gap Operationkeypartial
Local Patch Repositorynative
Agentless Patchingkeypartial
Multi-Tenant (MSP) ManagementkeyNot known

3 of 16 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 2026.3.1platform not recorded
  • 9.5.9338.0Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-10-06. Everything below is what has changed since.

  • 2026-10-20Product updatedSold to: Enterpriseevidence
  • 2026-10-12Capability addedAir-Gap Operation: limitedevidence
  • 2026-10-10New versionNew version: 9.5.9338.0 (Windows)evidence
  • 2026-10-10New versionNew version: 9.3.0.0 (Windows)evidence
  • 2026-10-09New versionNew version: 2026.3.1evidence
  • 2026-10-08Pricing plan addedPrice: price on requestevidence
  • 2026-10-08Capability addedSoftware Deployment: built inevidence
  • 2026-10-08Capability addedPatch Rollback: limitedevidence
  • 2026-10-06Certification addedCertified: Common Criteria (EAL2)evidence
  • 2026-10-06Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-10-06Capability addedLocal Patch Repository: built inevidence
  • 2026-10-06Capability addedAgentless Patching: limitedevidence
  • 2026-10-06Capability addedAir-Gap Operation: built inevidence
  • 2026-10-06Capability addedRoaming Endpoint Patching: built inevidence
  • 2026-10-06Capability addedCentral Management Console: built inevidence
  • 2026-10-06Capability addedPatch Compliance Reporting: built inevidence
  • 2026-10-06Capability addedReboot Management: built inevidence
  • 2026-10-06Capability addedVulnerability-Based Prioritisation: built inevidence
  • 2026-10-06Capability addedApplication Patching: built inevidence
  • 2026-10-06Capability addedOperating System Patching: built inevidence
  • 2026-10-06Capability addedAutomated Patch Deployment: built inevidence
  • 2026-10-06Platform addedRuns on Windowsevidence
  • 2026-10-06Platform addedRuns on Linuxevidence
  • 2026-10-06Platform addedRuns on Windows Serverevidence
  • 2026-10-06Product createdNew product, listed in Patch Managementevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.