Systems and methods for patching devices within an operational technology (ot) network

A non-transitory computer readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:

• receiving, from a server, a driver that enables an endpoint management agent running on the processing circuitry to patch a device on a subnet of an operational technology (OT) network;
• executing the driver to establish trust with the device;
• receiving, from the server, a patch;
• installing the patch on the device, wherein installing the patch on the device comprises installing software, installing firmware, updating software, updating firmware, removing software, removing firmware, or any combination thereof, via the driver;
• and
• providing, to the server, confirmation that the device has been patched.

A method, comprising:

• identifying a driver that enables an endpoint management agent running on a host device communicatively coupled to a subnet of an operational technology (OT) network to patch a target device on the subnet of the OT network;
• transmitting the driver to the endpoint management agent running on the host device;
• generating a sequence of patches to be installed on one or more target devices on the OT network, wherein the one or more target devices includes the target device;
• transmitting the patch to the endpoint management agent running on the host device;
• and
• receiving, from the endpoint management agent running on the host device, confirmation that the target device has been patched, wherein patching the target device comprises installing software, installing firmware, updating software, updating firmware, removing software, removing firmware, or any combination thereof, via the driver.