Third-Party Patch Management: How Application Patching Works and Where It Breaks
Most patch programs are built around the operating system. The vendor calendar is predictable and the tooling is mature. That is the smaller half of the job. Most of the software on a typical endpoint comes from somewhere else. Third-party patch management covers that half, and most teams run it with far less structure. The gap is easy to miss in day-to-day reporting. Windows Update finishes on a laptop, and the machine reports as patched. That report covers the operating system and nothing else.