Automation Theory

10/16/2026

🚨 Don't Let Outdated Software Put Your Business at Risk! 🔐

October is Cybersecurity Awareness Month, and there's no better time to give your cybersecurity strategy a closer look! 👀

Did you know that outdated third-party applications can create security vulnerabilities that cybercriminals may exploit? ⚠️

Keeping your software up to date is essential, but managing patches across multiple applications and devices doesn't have to be complicated!

💻 That's where we come in!

At ThirdPartyPatching.com, we help MSPs and IT professionals simplify third-party application patching so they can focus less on chasing updates and more on keeping their clients secure.

🛡️ Stay ahead of vulnerabilities.
⚙️ Simplify your patching process.
🔒 Strengthen your cybersecurity defenses.

This Cybersecurity Awareness Month, take a proactive approach to protecting your systems!

🚀 Want to make third-party patching easier?

👉 Visit https://thirdpartypatching.com/ to discover how we can help you simplify patch management and strengthen your security!

10/12/2026

6,591 Hudu servers are exposed on the Internet. We're one vulnerability away from changing A LOT of passwords.

It's , which means it's time for , our annual series looking at MSP tool enumeration and external security posture problems, and what can be done about them.

Here we see Hudu instances for both cloud and on-prem instances. This is one example of where moving to the cloud doesn't do much for security (but Hudu does have the option to move on-prem, where we can apply more protections). Shodan can fingerprint certain architectural details and is kind enough to tell us that some instances are EoL (and will provide specific CVEs). This is definitely undesirable from a defense perspective.

In a zero-day event, an attacker would click that "Download Results" button you see in the image, feed it to an attack bot, and then start moving laterally into client or internal environments.

Deploying a WAF in front of your can remove it from Shodan, protect it against exploits, and harden it in various ways. Learn more about protecting your here: https://automationtheory.com/reverse-proxy-and-waf-for-msp-tools/

10/09/2026

If your RMM is "discoverable," the trail gets rough fast.

Block enumeration, contain zero‑days, and gate access with granular controls, without rebuilding your stack.

Learn how the Reverse Proxy + WAF keeps your MSP wagon rolling: https://buff.ly/KwqgE1f

10/05/2026

7,038 ScreenConnect servers are exposed on the Internet. We're one zero-day away from disaster.

It's , which means it's time for , our annual series looking at MSP tool enumeration and external security posture problems, and what can be done about them.

ScreenConnect doesn't need its web UI on the Internet, but there are a number of business cases for doing so. The web UI is the primary target for attackers, so if we're looking to reduce attack surface, we need to focus on protecting it.

In a zero-day event, an attacker would click that "Download Results" button you see in the image, feed it to an attack bot, and then start deploying ransomware.

Deploying a WAF in front of your can remove it from Shodan, protect it against exploits, and harden it in various ways. Learn more about protecting your here: https://automationtheory.com/reverse-proxy-and-waf-for-msp-tools/

10/02/2026

Smarter patching starts with what you already have.

One of the biggest misconceptions in software deployment is that you need new tools to improve your workflow. You don’t. If your RMM already fits the way your team works, keep it and extend it.

With ThirdPatch, you can:

* Keep the workflows your technicians know
* Keep the platform your customers rely on
* Expand what you’re able to deploy across clients
* Automate third‑party app updates and reduce manual effort
* Improve consistency and reporting without switching ecosystems

Modern deployment shouldn’t force you into another stack. It should give you more freedom inside the one you’ve already built.

Learn more: https://buff.ly/dduSYAi

09/25/2026

We’ve got some great news to share: ThirdPatch was featured on Business Insider!

They spotlighted our product innovation and our mission to help MSPs close the third‑party patching gap with a smoother, more dependable approach.

Take a look and see why this matters for defense‑in‑depth and day‑to‑day operations across client environments.

You can read the feature here: https://buff.ly/jmiwaP6

ThirdPatch received Startup Of The Year honors at the 2026 Global Recognition Awards for building a patch management infrastructure that closes ...

09/18/2026

One package. Unlimited deployments. 📦

How many times has your MSP built essentially the same software deployment for different customers?

With ThirdPatch, you can build packages once and reuse them wherever they're needed.

Need different software for different clients? Packages can be nested, allowing you to combine your MSP-wide baseline with client-specific applications and configurations.

☑️Less rebuilding.
☑️ More consistency.
☑️ Easier scaling.

Because adding another customer shouldn't mean doing the same work all over again.

👉 See how ThirdPatch works:

https://thirdpartypatching.com/

09/11/2026

We're honored to see ThirdPatch featured by Forbes Scotland.

The article explores the traditional patching gap in the MSP industry and why we built ThirdPatch to help address it.

This is an exciting milestone for our new brand—and only the beginning.

Read the full article: https://forbesscotland.com/how-thirdpatch-closed-the-patching-gap-the-msp-industry-overlooked/

Jeremy Oaks spent years watching operating systems get patched on schedule while everything else on the same endpoint quietly rotted. Browsers, communication

09/04/2026

🔐 You need remote access. But does everyone need access to it?

Remote access via RMM tools is essential for many MSPs and IT teams, but anything that's remotely accessible deserves careful security consideration.

CISA's Guide to Securing Remote Access Software provides useful recommendations for reducing that risk, from controlling access and monitoring activity to maintaining software and configurations.

It's also closely aligned with how we think about security at Automation Theory: keep the access your team needs while adding layers that help reduce unnecessary exposure.

If remote management is part of your environment, this guide is worth bookmarking.

👉 Read CISA's guide:

https://www.cisa.gov/sites/default/files/2023-06/Guide%20to%20Securing%20Remote%20Access%20Software_clean%20Final_508c.pdf

Learn more about what we're building for MSPs:

👉 https://automationtheory.com

08/28/2026

Keep your RMM. Remove its limitations.

Your RMM does a lot. That doesn't mean it has to do everything.

When third-party application management depends entirely on what your RMM supports, custom app deployments can quickly become scripts your team must build, troubleshoot, and maintain.

ThirdPatch gives MSPs another option.

With an RMM-neutral approach, ThirdPatch works alongside your existing toolset, so you can keep the RMM your team already knows while expanding how you manage third-party applications.

Less time working around the limitations of your tools. More time getting work done.

See what RMM-neutral third-party patching looks like: https://ThirdPartyPatching.com