Patch every app,
and keep the receipt.
Twenty machines, no budget for a patching add-on, but you still need to know what's installed and keep it patched. Attestree gives you a real inventory, attested app updates rolled out in rings, and a feed your machines install from — on one self-hosted server. Whatever manages your devices today, whether Intune, Group Policy or your MSP's RMM, keeps Windows Update and device settings; Attestree takes over patching the apps winget and Chocolatey carry.
-
update Mozilla.Firefox · broad ring14 nodes sig:9c4f…
-
inventory per-user · Zoom.Zoom6 users sig:1ab2…
-
install Microsoft.PowerToys0.81.1 sig:bd71…
-
halt Vendor.Tool · signer changedheld HALT
-
update Notepad++.Notepad++ · canary ring8.9.8 sig:0fa9…
-
update choco/firefox125.0.1 managed · not attested
Three things small-business buyers ask us about first.
One pane of glass
What is installed, per machine and per user, and what is out of date — winget and Chocolatey in one view. No separate patching tool to buy.
Lightweight policy
Machines install only the versions you approved. Turn on the opt-in update pipeline (it needs upstream access) and updates go out to a few machines first, then everyone — and stop on their own if the publisher’s signature changes. Skip the consultancy engagement.
Self-hosted appliance
Run it on one server you already own with docker compose — free up to 200 endpoints with the Community Edition. No cloud-egress fees.
The products that fit a 24-machine shop.
Start with inventory and attested app updates. Your device manager keeps Windows Update and drivers. Everything runs from one self-hosted server.
Commercial — request access.
Pre-GA pricing is design-partner friendly. Tell us about your fleet — we'll come back within two business days.
"Design partner pipeline open. Be first to be quoted."