Every patch catalogue forces a trade-off: the breadth of an open, uncurated list, or the reliability of a vendor-curated one. SecTeer runs a hybrid, a tested catalogue of 46,000+ apps for reliability, plus custom packaging so a missing app never blocks you.
Uncurated catalogues give you everything and make you responsible for all of it. Curated catalogues take the packaging work off your plate, but only for what's on the list. The hybrid keeps the breadth and the safety net.
| Uncurated catalogueOpen / community-sourced | Curated catalogueVendor-tested list | SecTeer hybridCurated + custom packaging | |
|---|---|---|---|
| Breadth | Very large, community-sourced | Limited to the vendor's tested list | 46,000+ tested apps, plus anything you package |
| Testing & QA | You validate every package yourself | Vendor tests and packages for you | We test the catalogue; you control the rollout |
| Reliability | Variable, metadata can be wrong | High, within the list | High across the catalogue and your custom apps |
| Unlisted / custom apps | DIY, no safety net | ✕Blocked until the vendor adds it | ✓Package your own, or request new apps via the support portal |
| Architecture | Manual per variant | Usually x64-first | Architecture-aware: ARM64, x64 and x86 |
| Maintenance burden | High, you own all of it | Low, but you're dependent on the list | Low, without the lock-in |
| Best for | Tinkerers with time to spare | Teams whose apps fit the list | Teams that need breadth and control |
A curated catalogue of 46,000+ apps, tested and packaged, so you get wide coverage without validating every installer by hand.
If it's not in the catalogue yet, package it as custom software, or request it through the support portal and we'll add detection and patching.
ARM64, x64, and x86 variants are targeted automatically, so Windows ARM devices never quietly drift off patch coverage.