CyberIndexBeta

Product

Microsoft Configuration Manager (formerly System Center Configuration Manager, SCCM) is an on-premises systems management product in the Microsoft Intune family, used to manage Windows servers, desktops and laptops. Its software updates feature syncs Microsoft Update metadata through WSUS, deploys updates manually or through automatic deployment rules, and can publish third-party updates from vendor catalogs. Internet-based clients can be managed through an Azure-hosted cloud management gateway. It runs on Windows and Windows Server. Recorded capabilities include air-gap operation, application patching, automated patch deployment and central management console. Its record also notes local patch repository, operating system patching, patch compliance reporting and phased / ring deployment. It is aimed at Enterprise buyers.

Current Version
2609
Market
Enterprise
Licence
Paid
Price
Paid · price unknown
Record Created
2026-10-06
Last Updated
2026-10-12

Vendor

Microsoft is the largest security vendor in this index by installed base, and almost none of that was bought deliberately: Microsoft Defender Antivirus is built into Windows and switched on by default, so it protects any machine whose owner has not installed something else. That changes how its results should be read — it is the baseline every other product in this index is implicitly compared against. The paid products are a different thing from the built-in one. Microsoft Defender for Endpoint adds detection and response, threat and vulnerability management and central policy to the same engine; Microsoft Defender for Business is the smaller-organisation edition; Microsoft Defender XDR correlates signals across endpoints, identity, email and cloud apps; and Microsoft Sentinel is the SIEM above them. Microsoft Defender for Individuals, included with Microsoft 365, is the consumer application. Microsoft enters the public test cycles regularly, and its results are among the most consistently available in this index — useful, because for many readers the real question is not which product is best in the abstract but whether a paid product beats the one already installed. Vendor page →

Country
United States
Headquarters
Redmond, United States
Year Established
1975
Customers
1.6M organisations
Users
1.4B devices protected
Revenue
$331.8B (2026)

Platforms

Windowsnative
Windows Servernative

Target Market

Enterprise primary

Capabilities

Application Patchingkeynative
Operating System Patchingkeynative
Automated Patch Deploymentkeynative
Vulnerability-Based PrioritisationkeyNot known
Patch RollbackkeyNot known
Phased / Ring Deploymentnative
Roaming Endpoint Patchingkeynative
Patch Compliance Reportingnative
Reboot Managementnative
Software Deploymentnative
Vulnerability ShieldingNot known
Central Management Consolenative
Air-Gap Operationkeypartial
Local Patch Repositorynative
Agentless PatchingkeyNot known
Multi-Tenant (MSP) ManagementkeyNot known

5 of 16 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPaidnot statedno recurring chargeNot known

Versions

  • 2609platform not recordedreleased 2026-09-28
  • 5.00.8634.1000Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-10-06. Everything below is what has changed since.

  • 2026-10-12Capability addedAir-Gap Operation: limitedevidence
  • 2026-10-10New versionNew version: 5.00.8634.1000 (Windows)evidence
  • 2026-10-08New versionNew version: 2609evidence
  • 2026-10-06Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-10-06Capability addedLocal Patch Repository: built inevidence
  • 2026-10-06Capability addedAir-Gap Operation: built inevidence
  • 2026-10-06Capability addedRoaming Endpoint Patching: built inevidence
  • 2026-10-06Capability addedCentral Management Console: built inevidence
  • 2026-10-06Capability addedSoftware Deployment: built inevidence
  • 2026-10-06Capability addedPatch Compliance Reporting: built inevidence
  • 2026-10-06Capability addedReboot Management: built inevidence
  • 2026-10-06Capability addedPhased / Ring Deployment: built inevidence
  • 2026-10-06Capability addedApplication Patching: built inevidence
  • 2026-10-06Capability addedOperating System Patching: built inevidence
  • 2026-10-06Capability addedAutomated Patch Deployment: built inevidence
  • 2026-10-06Pricing plan addedPrice: paidevidence
  • 2026-10-06Platform addedRuns on Windowsevidence
  • 2026-10-06Product updatedSold to: Enterpriseevidence
  • 2026-10-06Platform addedRuns on Windows Serverevidence
  • 2026-10-06Product createdNew product, listed in Patch Managementevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.