AJapps

SCADA Patch Compatibility Register

Load the AJ Collector reports of your SCADA servers and workstations and the SCADA vendor's list of approved Windows updates: see which updates are installed where, which are not approved or still under test, which approved ones are missing, and whether redundant servers run the same patch level.

Computers (AJ Collector reports)

    Vendor approval list

    Tool guide · know before you use

    What this tool is, how it works and how far to trust it

    A register of the Windows updates installed on each SCADA computer (from AJ Collector reports) against the SCADA vendor's approval list, with checks between redundant servers.

    Read this before relying on a result. Every method, formula, assumption and limit is stated here, so you can check the answer yourself instead of accepting it blindly.

    What it can do

    • Show a matrix of updates × computers with the vendor's status.
    • Flag updates installed but not approved, withdrawn or still under test; approved updates not installed; updates the vendor has not assessed; old patch levels.
    • Compare redundant pairs and their operating systems.
    • Export the matrix to CSV.

    Why you need it

    • Untested updates can break SCADA drivers, OPC DA or redundancy; missing approved updates leave vulnerabilities open.
    • Redundant servers on different patch levels may not fail over as tested.

    Understand this first

    • The vendor's approval list is the authority for which updates may be installed.
    • Windows' installed-update list (Get-HotFix) covers most but not all update types.

    What you need before you start

    • AJ Collector reports of the computers.
    • The vendor's approval list as CSV (KB, status, date, note).
    • The names of redundant pairs.
    • A current browser (Chrome, Edge, Firefox or Safari). Nothing is installed and your data is never uploaded; it is processed on your own computer.

    How to use it

    • Add the collector reports (or load the sample).
    • Open or paste the vendor list.
    • Enter redundant pairs such as SCADA-SRV01=SCADA-SRV02.
    • Read the findings and the matrix; export it for the maintenance plan.

    What you get

    • Findings per computer and per pair, and the update matrix with vendor status.

    How to read the results

    • Not approved or withdrawn updates: ask the vendor and plan removal if required.
    • Missing approved updates: plan installation on both servers of a pair in the same window.

    Technical basis

    • IEC 62443-2-3 patch management practice; KB numbers normalised from the collector reports and the approval list.

    Limits: when not to rely on it

    • Does not download or install updates.
    • Depends on the completeness of the vendor list and the collector reports.

    Sample files for this tool

    Download, open and compare with what the guide says you should see.

    All sample files and what to expect →

    For preliminary engineering use. Results must be checked by a qualified engineer against the project's standards. How results are checked · Terms & disclaimer · Build 61a41bc · 2026-11-14