PatchMon Cloud
Your own isolated instance with a dedicated database: we apply updates, run backups, watch uptime, and include support so you are not maintaining the patch-management control plane on nights and weekends.
How it works
From signup to monitoring your first host in under five minutes.
Pick a plan
Starter, Plus, or Max scale by host count, isolation, backup retention, log retention, and support, not by which product features you unlock. Every tier includes the full PatchMon platform.
Sign up and your instance spins up
Your own PatchMon deployment is provisioned in under two minutes. You get your own subdomain (yourcompany.patchmon.net) and your own isolated database.
Install agents on your hosts
Same one-line curl install as self-hosted, pointed at your cloud instance. Linux, FreeBSD, and Windows agents connect outbound over WebSocket.
You are live
Dashboard, patching, compliance scanning, remote access, alerting - all managed. We handle updates, backups, and monitoring. You focus on your infrastructure.
What you get
Every Cloud plan includes the full PatchMon platform. These are the managed services we handle so you do not have to.
Your Own Isolated Instance
Each cloud customer gets their own PatchMon deployment with a dedicated PostgreSQL database. Traffic is routed to your instance by hostname through a gateway proxy. Your data is never co-mingled with other tenants.
- Per-tenant database - not a shared multi-tenant app
- PatchMon subdomain (yourcompany.patchmon.net); custom domain on Plus and Max
- Full PatchMon capability in every tier: you are not buying feature add-ons
- Gateway proxy routes traffic to the correct tenant instance by hostname
Tenant Isolation and Security
Isolation is enforced at the database level. Each tenant has their own PostgreSQL database, their own Redis namespace, and traffic is resolved by hostname at the proxy layer.
- Per-tenant PostgreSQL database with separate credentials
- Redis isolation via per-tenant database index mapping
- TLS everywhere - agents, browser, and internal communication
- IP allowlisting at Nginx and kernel layers on Plus and Max (not on Starter)
Automated Backups and Recovery
We back up your database on a schedule that matches your tier. Your data is always recoverable, and you can export it at any time.
- Starter: weekly backups with 30 days retention
- Plus: daily backups with 90 days retention
- Max: daily backups with 1 year retention
- Full data export available at any time via API or dashboard
Automatic Updates
New PatchMon versions are deployed to your instance with zero downtime. No migration scripts to run, no Docker images to pull, no breaking changes to worry about.
- Server updates handled by us - you always run the latest stable version
- Database migrations applied automatically during updates
- Zero-downtime deployments
- Agent updates are independent - update agents at your own pace
Monitoring and Uptime
We monitor your instance around the clock. Automated health checks detect issues and restart services when needed. Infrastructure managed by 9 Technology Group Ltd.
- 24/7 instance monitoring with automated health checks
- Automated restart on failure
- Infrastructure-level monitoring independent of your PatchMon alerting
- Status notifications for planned maintenance windows
Support by Tier
Every tier includes access to documentation and guides. Higher tiers add direct support channels with faster response times.
- Starter: community support via Discord and GitHub
- Plus: email support with onboarding assistance
- Max: premium support with 4-hour critical response, 24-hour standard
- All tiers: full documentation, guides, and community access
Your data stays yours
No vendor lock-in. Your data lives in a standard PostgreSQL database you can export anytime. Move to self-hosted Community or another environment when it suits you, portable from day one.
- Full database export available at any time via API or dashboard
- Migrate to self-hosted: export your database, import into Community edition, and you are running independently
- Open APIs and documented agent protocol: no black-box appliance
- If you cancel, we provide a complete data export before account closure
Security
Outbound-only agents, TLS everywhere, and per-tenant data isolation, plus infrastructure hardening and monitoring we apply on your behalf in Cloud.
Outbound-only agents
Agents connect outbound over WebSocket. No inbound firewall rules needed on your monitored hosts.
Encryption in transit
All communication uses TLS - agent connections, browser access, and API requests. No data travels in the clear.
Per-tenant database isolation
Your data lives in its own PostgreSQL database with separate credentials. Not a row-level filter on a shared database.
Credentials stored encrypted
Agent credentials are stored with strong one-way hashing. Sensitive configuration (AI keys, notification secrets) is encrypted at rest with per-instance keys.
Infrastructure and regions
Cloud infrastructure is hosted on IONOS and managed by our sister company 9 Technology Group Ltd, who hold ISO 27001 and ISO 9001 certifications.
United Kingdom
UK
Germany
DE
France
FR
United States
New York
Managed by 9 Technology Group Ltd
Our hosting partner holds ISO 27001 (information security) and ISO 9001 (quality management) certifications. You choose your region at signup.
Cloud tiers at a glance
All tiers include every platform feature. Tiers differ in host limits, resource isolation, backup retention, and support.
| Starter | Plus | Max | |
|---|---|---|---|
| Host limit | Up to 10 | Up to 100 | Up to 250 |
| Resource isolation | Shared | Shared | Dedicated |
| Backup frequency | Weekly | Daily | Daily |
| Backup retention | 30 days | 90 days | 1 year |
| Log retention | 14 days | 30 days | 12 months |
| IP allowlist | Not included | Nginx + kernel-level | Nginx + kernel + edge |
| Support | Community | Email + onboarding | Premium |
| Price (monthly) | $9/mo | $39/mo intro (reg. $85/mo) | $199/mo |
Plus list price is $85/mo or $850/yr. Introductory pricing is $39/mo or $399/yr through April 2026.
Cloud FAQ
Is my data stored separately from other customers?
Yes. Each cloud tenant gets their own PostgreSQL database with separate credentials. The gateway proxy routes traffic by hostname to the correct tenant instance. Your data is never stored in a shared database with other customers.
Can I use my own domain?
Every tier includes a PatchMon subdomain (yourcompany.patchmon.net). Custom domain (bring your own hostname) is available on Plus and Max, not on Starter.
What happens if I outgrow my tier?
Upgrade seamlessly. Your instance, data, and configuration stay exactly as they are. The only thing that changes is your host limit, resource allocation, and support level. No data migration required.
Can I migrate from Cloud to self-hosted?
Yes. Export your PostgreSQL database and configuration, deploy Community in your environment, and import: standard schema and APIs, no proprietary trapdoors. We help with a clean handoff if you cancel.
Where are Cloud instances hosted?
Cloud infrastructure is hosted by our sister company 9 Technology Group Ltd (9.technology), who hold ISO 27001 and ISO 9001 certifications. You choose your region at signup: United Kingdom, Germany, France, or United States (New York). Hosting runs on IONOS infrastructure.
Is there a free trial?
Yes. All Cloud tiers include a 14-day free trial. Card required at signup, but you can cancel anytime before the trial ends with no charge.
What is the difference between Cloud and self-hosted?
With Cloud we operate the server: automatic updates, scheduled backups, uptime monitoring, layered IP controls, and tiered support, so you are not on call for the patch-management control plane. Self-hosted Community is free with unlimited hosts when you prefer to run the full stack in your own environment.
Book a walkthrough
15-minute call. No sales pitch. We'll show you the dashboard, agent deployment, and answer your questions.
Booking calendar loading...
Cal.com integration coming soon
Prefer to self-host?
Community is free with unlimited hosts when you want to run everything in your own environment; updates, backups, and uptime are on you.