Action1: patches applied on time, vulnerabilities tracked
Action1 is a cloud patch management platform. A lightweight agent on every workstation and server reports the inventory, detects vulnerabilities and installs Windows and third-party application updates, within deadlines you set for each severity level.
Cyber Praxis is an Action1 partner: we deploy the platform on its European instance, configure it and follow up the results for your teams.
The problem it solves
- Patches applied by hand, late, without knowing which devices are still exposed.
- Third-party applications (browsers, PDF readers, archiving tools…) that are never updated.
- Remote laptops that no longer go through the company network.
- A NIS2 vulnerability management requirement that cannot be demonstrated without figures.
What Action1 does
Automated patching
Windows, Windows Server and third-party application updates from a single console, with approval, scheduling and controlled reboots.
Vulnerabilities and deadlines
Each detected vulnerability gets a deadline based on its severity (for example 7 days for critical, 15 for high); the dashboard shows what is overdue and what is due soon.
Real-time inventory
Hardware and installed software on every device: you finally know what runs on the estate, including what should not be there.
Software deployment
Install and remove applications one at a time or at scale, from a built-in catalogue or your own packages.
Remote access and scripts
Take control of a device with no VPN or open RDP, and run PowerShell or CMD scripts on many machines at once.
Reports and alerts
On-demand or scheduled reports on update, vulnerability and antivirus status, real-time alerts, and an API to connect the platform to your other tools.
What Action1 contributes to NIS2, and what it does not
Action1 directly addresses the NIS2 vulnerability handling requirement. It also provides evidence for other measures, without covering them on its own.
| NIS2 measure (Art. 21(2)) | Reference | Action1 contribution |
|---|---|---|
| System maintenance and vulnerability handling | (e) | Direct |
| Assessing the effectiveness of measures | (f) | Partial: deadline compliance indicators and reports |
| Asset management | (i) | Partial: hardware and software inventory |
| Basic cyber hygiene | (g) | Partial: up-to-date devices and software |
| Policies, risk management, suppliers, training | (a), (d), (g) | None: organisational measures |
Cyber Praxis reading of Article 21 of the NIS2 Directive, transposed in Belgium by the Law of 26 April 2024. Organisational measures are covered by our CyFun audits and CISO support.
What Cyber Praxis does
Action1 applies the patches. We make sure they are applied according to a clear rule, and that the results can be shown to an auditor.
Set-up
Creating the organisation, deploying the agent on workstations and servers, grouping machines by use.
Update rules
Setting deadlines by severity, maintenance windows, pilot groups and approvals.
Follow-up
Periodic review of overdue vulnerabilities, handling blocking cases, monthly report to management.
Compliance
Mapping the indicators to NIS2 and CyFun requirements, and handling the measures the tool does not cover.
Frequently asked questions about Action1
Is Action1 paid?
The publisher offers a free edition, with no feature limits, for up to 200 endpoints. Beyond that, or to get publisher support, a licence is required. Our support is invoiced separately.
Do I need an on-site server?
No. Action1 is a cloud platform: only a lightweight agent is installed on each machine. Remote laptops are updated wherever they are, as soon as they have an internet connection.
Where is the data hosted?
Action1 has a European instance, which we use. The publisher is SOC 2 Type II and ISO/IEC 27001:2022 certified.
Does Action1 replace a vulnerability scan?
Not entirely. It sees vulnerabilities in the systems and software where its agent is installed. Network equipment, exposed websites and configurations call for an external scan or a penetration test, which we also carry out.