Patch every app,
and keep the receipt.
Twenty machines, no budget for a patching add-on, but you still need to know what's installed and keep it patched. Attestree gives you a real inventory, attested app updates rolled out in rings, and a feed your machines install from — on one self-hosted server. Whatever manages your devices today, whether Intune, Group Policy or your MSP's RMM, keeps Windows Update and device settings; Attestree takes over patching the apps winget carries.
- update Mozilla.Firefox · broad ring 14 nodes sig:9c4f…
- inventory per-user · Zoom.Zoom 6 users sig:1ab2…
- install Microsoft.PowerToys 0.81.1 sig:bd71…
- halt Vendor.Tool · signer changed held HALT
- update Notepad++.Notepad++ · canary ring 8.9.8 sig:0fa9…
- held choco/firefox installed not attested · not served
Three things small-business buyers ask us about first.
One pane of glass
What is installed, per machine and per user, and what is out of date — winget and Chocolatey in one view. No separate patching tool to buy.
Lightweight policy
Machines install only the versions you approved. Turn on the opt-in update pipeline (it needs upstream access) and updates go out to a few machines first, then everyone — and stop on their own if the publisher’s signature changes. Skip the consultancy engagement.
Self-hosted appliance
Run it on one server you already own with docker compose — free up to 200 endpoints with the Community Edition. No cloud-egress fees.
The products that fit a 24-machine shop.
Start with inventory and attested app updates. Your device manager keeps Windows Update and drivers. Everything runs from one self-hosted server.
Attestree for winget
Attested install gate for winget; Chocolatey inventoried, not deployed until it can be attested.
Read productInventory
One inventory across your package managers — winget, Chocolatey and Scoop, plus plain uninstall entries.
Read productCommercial — request access.
Pre-GA pricing is design-partner friendly. Tell us about your fleet — we'll come back within two business days.
"Design partner pipeline open. Be first to be quoted."