CloudAware provides patch monitoring and patch eligibility information. Along with OS level data, the information on patches becomes available in CloudAware CMDB once Breeze agent is installed on a machine.
CloudAware shows what patches are outstanding, equally well for Windows and Linux. If a patch is security-related, meaning that there is a security vulnerability that has been identified with that version of the package, the checkbox 'Security' is going to be checked requiring your attention. Once a package is applied, the column 'Installed Date' is populated. The column 'Package Age' gives the idea of how well your security team is doing with patching.