Check the status of CVEs. Learn More.
Keeping your systems up 100% of the time requires live patching. Our solutions will align strongly with your risk, compliance, and operational uptime requirements.
TuxCare is trusted by the most innovative companies across the globe.
Our partner program is designed with flexibility in mind for partners who are at various stages of their business lifecycle. With financial investment and dedicated resources, you will continue to grow with TuxCare.
Would you like to work with a leader in open source and Linux security that values innovation and partnerships?
Partners receive benefits that are designed to reward the commitment that they have made to the sale of our products and services.
Learn about TuxCare's modern approach to reducing cybersecurity risk with Blogs, White Papers, and more.
Continually increasing Cybersecurity, stability, and availability of Linux servers and open source software since 2009.
TuxCare provides live security patching for numerous industries. Learn how TuxCare is minimizing risk for companies around the world.
KernelCare Enterprise live patching reduces the time needed to patch vulnerabilities by automatically patching Linux systems while they run. It eliminates the need for maintenance windows, where the systems must be rebooted for the patch to take effect. With KernelCare Enterprise, you can now reach your vulnerability patching goals for all your Linux systems while reducing the time spent on maintenance.
KernelCare Enterprise live patching enhances your vulnerability patching program by providing live patches to the Linux kernel and, optionally, with add-ons to critical userspace components, as well as the virtualization stack.
The systems are patched according to your patch deployment policy, allowing you to customize your patch management to align with the needs of your unique environment, whether online or in an air-gapped environment. Plus, your vulnerability reports reduce in size quickly as KernelCare seamlessly integrates with all popular vulnerability scanners to give you an accurate vulnerability exposure report.
In large organizations, the separation of duties and different system ownership make security patching a challenging task. According to Ponemon Institute, 56% of enterprise organizations take from five weeks to more than one year to apply security patches. At the same time, high risk vulnerabilities appear at unexpected times.
Instead of spending time identifying the responsible teams and deliberating on patching and restarting the vulnerable servers during the next maintenance window, KernelCare Enterprise live patching enables you to patch systems as soon as the fix is available – shrinking the vulnerability patching window to the absolute minimum.
Many organizations have settled for monthly or quarterly maintenance windows where systems are updated, services are restarted, and servers are rebooted. That time consuming process ensures the latest vulnerability fixes are applied, but at the cost of service downtime and, most importantly, at the expense of using human capital on mundane tasks.
With KernelCare Enterprise, you can eliminate maintenance windows or set them to what makes sense for your business, whether it is 12 months apart or after several years of uptime. Eliminate downtime from your infrastructure and use your engineering resources where it matters by live patching vulnerabilities with KernelCare.
With KernelCare Enterprise, all the impactful Linux kernel and critical userspace vulnerabilities are patched. That includes all known vulnerabilities with available fixes, irrespective of severity. We understand that the CVSS score does not translate to risk without an analysis for each individual environment.
This significantly reduces time spent on analyzing system vulnerability data by making sure that these vulnerabilities do not show up in your vulnerability scanner at all. Our customers have kept their systems running for more than eight years with zero downtime while all impactful vulnerability patches have been applied.
Kernelcare Enterprise comes with KernelCare Linux kernel live patching and optional add-ons that enhance the security coverage of your Linux infrastructure.
$59.50 per year / per server
for critical userspace component live patching (glibc & OpenSSL)
$34.50 per year / per server
for virtualization live patching
Request a quote
When a vulnerability is discovered, we prepare a fix for the Linux kernel. The fix is then combined with all previous vulnerability fixes to form a live patch. Once the live patch passes our rigorous internal testing process, it is distributed to KernelCare Enterprise systems. When the KernelCare systems receive the live patch, it is loaded by a special kernel module. The module detects when the old vulnerable code is not in use and then it momentarily pauses the kernel and replaces the old code with the new non-vulnerable code.
Just fill out the form below to get a customized demo from our award-winning team.
Dedicated ePortal server that runs inside your firewall lets you decide how and what patches are rolled out across your organization.
Flawless interoperability with automation tools, vulnerability scanners and cloud infrastructure monitoring services including Nessus, Qualys, Rapid7, Puppet, Ansible, Chef, Datadog, Tanium and Crowdstrike.
Setup assistance, priority support, 24 hours a day, 365 days a year.
With 40+ Linux distributions supported by TuxCare and with both x86-64 and ARM64 CPUs, IT teams can be sure all enterprise systems stay compliant, without service interruptions.
For a complete list of supported systems, visit this page
Eliminate cybersecurity vulnerabilities while running operating systems by continuing to receive security updates from
Keep all components of production Linux systems constantly up to date
Tell us your challenges and our experts will help you find the best approach to address them with the TuxCare product line.
Tech Support
Documentation
Login
Contact Us