CyberIndexBeta

Product

WSUS is a Windows Server role that synchronises updates from Microsoft Update and lets administrators approve and distribute Microsoft product updates to computers on their own network, targeted by computer group with deadlines. Clients pull approved updates from the WSUS server through the built-in Windows Update Agent. Microsoft has deprecated WSUS: it gets no new features, but it still ships and is supported with security and quality updates. A WSUS server can also be the update source for other WSUS servers within the organization. In a WSUS implementation, at least one WSUS server on your network must be able to connect to Microsoft Update to get available update information. This change requires either an update installation or the manual addition of Multipurpose Internet Mail Extensions (MIME) types to Internet Information Services (IIS) on WSUS servers. Delivery is on-premises software.

Current Version
Part of Windows Server · no separate version
Market
EnterpriseMid-MarketSMB
Licence
Free
Price
Free
Record Created
2026-10-06
Last Updated
2026-10-28

Vendor

Microsoft is the largest security vendor in this index by installed base, and almost none of that was bought deliberately: Microsoft Defender Antivirus is built into Windows and switched on by default, so it protects any machine whose owner has not installed something else. That changes how its results should be read — it is the baseline every other product in this index is implicitly compared against. The paid products are a different thing from the built-in one. Microsoft Defender for Endpoint adds detection and response, threat and vulnerability management and central policy to the same engine; Microsoft Defender for Business is the smaller-organisation edition; Microsoft Defender XDR correlates signals across endpoints, identity, email and cloud apps; and Microsoft Sentinel is the SIEM above them. Microsoft Defender for Individuals, included with Microsoft 365, is the consumer application. Microsoft enters the public test cycles regularly, and its results are among the most consistently available in this index — useful, because for many readers the real question is not which product is best in the abstract but whether a paid product beats the one already installed. Vendor page →

Country
United States
Headquarters
Redmond, United States
Year Established
1975
Customers
1.6M organisations
Users
1.4B devices protected
Revenue
$331.8B (2026)

Platforms

Windowsnative
Windows Servernative

Target Market

Enterprise primaryMid-Market secondarySMB primary

Capabilities

Application PatchingkeyNot known
Operating System Patchingkeynative
Automated Patch Deploymentkeynative
Vulnerability-Based PrioritisationkeyNot known
Patch Rollbackkeypartial
Phased / Ring Deploymentnative
Roaming Endpoint PatchingkeyNot known
Patch Compliance Reportingnative
Reboot Managementpartial
Software DeploymentNot known
Vulnerability ShieldingNot known
Central Management Consolenative
Air-Gap Operationkeypartial
Local Patch Repositorynative
Agentless PatchingkeyNot known
Multi-Tenant (MSP) ManagementkeyNot known

7 of 16 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryFreenot statedno recurring chargeFree

Versions

Part of Windows Server: it comes with Windows Server and is updated with it, so it has no version of its own.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-10-06. Everything below is what has changed since.

  • 2026-10-20Product updatedSold to: Enterpriseevidence
  • 2026-10-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-10-20Product updatedAlso sold to: Mid-Marketevidence
  • 2026-10-20Product updatedSold to: SMBevidence
  • 2026-10-20Pricing plan addedPrice: freeevidence
  • 2026-10-12Capability addedAir-Gap Operation: limitedevidence
  • 2026-10-06Capability addedLocal Patch Repository: built inevidence
  • 2026-10-06Capability addedAir-Gap Operation: built inevidence
  • 2026-10-06Capability addedCentral Management Console: built inevidence
  • 2026-10-06Capability addedPatch Compliance Reporting: built inevidence
  • 2026-10-06Capability addedReboot Management: limitedevidence
  • 2026-10-06Capability addedPhased / Ring Deployment: built inevidence
  • 2026-10-06Capability addedPatch Rollback: limitedevidence
  • 2026-10-06Capability addedOperating System Patching: built inevidence
  • 2026-10-06Capability addedAutomated Patch Deployment: built inevidence
  • 2026-10-06Platform addedRuns on Windowsevidence
  • 2026-10-06Platform addedRuns on Windows Serverevidence
  • 2026-10-06Product createdNew product, listed in Patch Managementevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.