In active development

Corestart Warden

Cross-platform OS patch management. Scan, install and track updates across your Windows and Linux systems from a single console, using the update tools they already trust.

  • Windows Server 2022
  • Windows Server 2025
  • Windows 11
  • Ubuntu
  • RHEL
  • Fedora
Features

One console for Windows and Linux

Mixed Windows and Linux environments usually mean a separate patching tool for each. Warden replaces that patchwork with one tool. It's pure PowerShell with zero dependencies, so it runs on a stock server out of the box.

Native update mechanisms

Windows Update Agent on Windows, apt and dnf over SSH on Linux. Your systems are patched the way they already expect, not through a custom patch format.

Smart, safe reboots

Choose a reboot policy (never, if required or always) and set maintenance windows. Warden confirms each host actually went down and came back, rather than assuming it did.

App updates on their own track

winget on Windows and Flatpak on Linux run separately from OS patching, and never force a reboot.

Full audit trail

Per-run and per-host logs, plus JSON, CSV and HTML reports for every patch cycle.

Kerberos-native authentication

WinRM and SSH connections authenticate through Kerberos and Active Directory. No stored passwords or static keys.

Hands-on or scheduled

An interactive console for operators, and an unattended mode for scheduled runs with clean exit codes that plug into your monitoring.

On the roadmap

Where Warden is headed

The next big steps for Warden.

Web-based control plane

Log in to a site to trigger, monitor and audit patch runs, with no console or RDP access to the Warden machine needed. Planned for Warden 2.0.

Parallel multi-host runs

Patch many hosts at once instead of one after another.

Broader platform coverage

More operating systems and package managers, added on top of the existing per-OS design.

Interested in Warden?

Tell us about your environment, or ask us anything about where Warden is headed.