Delayed is not patched.
Reported patched is not verified.
Replay a redacted patch-exception history from append-only events. CISA KEV is a manually entered prioritization signal—not an applicability decision—and every closure requires a distinct verification step. The tool never discovers assets, reads versions or deploys remediation.
Patch-exception event ledger
| Exception | Software / scope | Signal / KEV | State | Target / review | Delay / control | Owner / approver / reviewer | Evidence |
|---|
| Row / time | Exception | Event | Applied | State after / reason |
|---|
This register cannot establish whether software is installed, affected, reachable, exploitable, updated or safe. CISA KEV due dates bind covered federal agencies under their directive; another organization must set and approve its own applicable target.
Cybersecurity boundary: all inputs stay in this browser; the paid report receives only redacted aliases, dates, roles, signals and evidence references. No asset inventory, scanner, RMM, vendor account, host, endpoint or patch system is connected. Do not enter hostnames, IP addresses, serial numbers, account/user data, credentials, keys, configurations or exploit details. The tool does not determine applicability, risk, legal/contract duties, compensating-control sufficiency, remediation success or security. Authorized IT/security owners must use current source-system evidence.
$5/mo Patch exception review membership
Unlock repeat editable Markdown reviews for up to 50 exceptions and 500 events, including invalid-transition receipts, overdue queues, manual KEV signals, delay/control evidence and verification signoff. Scanning and deployment are not included.
- deterministic exception event replay
- delay approval and review-date receipts
- compensating-control evidence queue
- remediation report versus independent verification separation
- IT/MSP owner and security reviewer signoff
Authoritative prioritization signals and strong automation substitutes
PMF pre-judgment 73/100 · urgent pain, very weak differentiation beside RMM and patch platforms