CloudAware provides patch monitoring and patch eligibility information. You would only need to install the Breeze agent on the machines to make this information, along with OS level data, available in Cloudaware CMDB. CloudAware shows what patches are outstanding, equally well for Windows and Linux.
If a patch is security-related, meaning that there is a security vulnerability that has been identified with that version of the package, the checkbox is going to be checked requiring your attention.
The column 'Package Age' gives an idea on how well your security team is doing with patching.