ness-patch-guard
Operating system and application patch management.
Commands are run by name (the installer adds the binaries to PATH). On Windows, run them in PowerShell as administrator (recommended; required where marked "Yes"). On macOS and Linux, with sudo.
- Windows
- macOS
- Linux
Subcommands
| Argument | Description | Example | Requires admin |
|---|---|---|---|
scan [--pending] [--installed] [--summary] [--recent <días>] | Scans updates: pending, installed, summary or those installed in the last N days. | ness-patch-guard scan --pending | Recommended |
install (--all | --critical | --security | --kb <KB> | --kb-list <KB1,KB2>) | Installs updates: all, critical, security, one KB or a KB list. | ness-patch-guard install --security --reboot never --dry-run | Yes |
uninstallkb <KB> | Uninstalls an update (KB). | ness-patch-guard uninstallkb <KB> | Yes |
doctor | Patch Guard health check. | ness-patch-guard doctor | Recommended |
install / uninstallkb options
| Argument | Description | Example | Requires admin |
|---|---|---|---|
--reboot never|auto | Never reboot, or reboot automatically if needed. | --reboot never | Yes |
--timeout <s> | Maximum time in seconds. | --timeout 3600 | Yes |
--dry-run | Shows what would happen without installing or uninstalling. | --dry-run | Yes |
Global options
| Argument | Description | Example | Requires admin |
|---|---|---|---|
--json | JSON output. | ness-patch-guard scan --pending --json | Recommended |
--quiet, -q | Minimal output. | -q | Recommended |
--verbose, -v | Verbose output. | -v | Recommended |
Examples:
# Show pending updates
ness-patch-guard scan --pending
# Simulate installing security patches without rebooting
ness-patch-guard install --security --reboot never --dry-run
# Uninstall a KB
ness-patch-guard uninstallkb <KB>
| Argument | Description | Example | Requires admin |
|---|---|---|---|
--install | Installs the service. | sudo ness-patch-guard --install | Yes (sudo) |
--uninstall | Uninstalls the service. | sudo ness-patch-guard --uninstall | Yes (sudo) |
--doctor | Health check. | sudo ness-patch-guard --doctor | Yes (sudo) |
--trigger | Description pending. | sudo ness-patch-guard --trigger | Yes (sudo) |
--list | Description pending. | sudo ness-patch-guard --list | Yes (sudo) |
--outdated | Description pending. | sudo ness-patch-guard --outdated | Yes (sudo) |
--version | Shows the version. | ness-patch-guard --version | Yes (sudo) |
| Argument | Description | Example | Requires admin |
|---|---|---|---|
--security-only | Description pending. | sudo ness-patch-guard --security-only --dry-run | Yes (sudo) |
--upgradable | Description pending. | sudo ness-patch-guard --upgradable | Yes (sudo) |
--packages <lista> | Description pending. | sudo ness-patch-guard --packages <lista> | Yes (sudo) |
--only-upgrade | Description pending. | sudo ness-patch-guard --only-upgrade | Yes (sudo) |
--dry-run | Shows what would happen without applying changes. | sudo ness-patch-guard --security-only --dry-run | Yes (sudo) |
--no-install-recommends | Description pending. | sudo ness-patch-guard --no-install-recommends | Yes (sudo) |
Source
Agent binaries help (--help) on Windows, macOS and Linux; NESS confirmations (Oct-2026).