Managed patching and uptime SLA for a UK legal-tech platform
Legal case-management platform, Leeds
- Challenge
- Security patching happened whenever an engineer had a spare afternoon, which meant some servers ran dependencies over a year out of date. A client security questionnaire ahead of a major contract renewal asked for a patch SLA the team could not honestly provide.
- Solution
- AGS took over patch management under a defined SLA: critical CVEs patched within 48 hours, routine patching on a monthly cadence, all applied through a staging environment with automated smoke tests before production. Every patch is logged against the CVE it addresses.
- Results
- Critical CVEs patched within 48 hours, 100% of the time over 6 months
- Patch-related incidents down to zero since rollout
- Security questionnaire response time cut from days to hours