Freedom251 › Patch Management Software
KernelCare Enterprise
What KernelCare Enterprise is
KernelCare Enterprise provides live security patches for supported Linux kernels without requiring system reboots. It covers distributions including RHEL, Oracle Linux, Rocky Linux, AlmaLinux, CentOS, Ubuntu, Debian, Amazon Linux, CloudLinux, Proxmox VE, and Virtuozzo, along with other supported Linux systems. The service supports x86-64 Intel and AMD hardware and ARM64. Its optional on-premises ePortal lets organizations set rollout policies and choose machines and timing; it can also deploy patches in air-gapped environments. Scheduled deployment and offline device support are listed, with a device limit of 199. Patches continue while the kernel vendor releases security updates for that series. TuxCare says it aims to deliver patches for vendor-fixed CVEs within 10 days of disclosure, though complex fixes may take longer. Native scanner integrations include Tenable Nessus, Qualys, and Rapid7. Pricing is on request, with a 30-day trial and no free plan.
Who it suits
It suits organizations maintaining supported Linux distributions, including scheduled or air-gapped environments. Buyers should check the 199-device limit and distribution compatibility.
What it does well
- Patches kernels without reboots
- Supports many enterprise Linux distributions
- Air-gapped deployment through ePortal
- Scheduled deployment and offline support
- Integrates with named vulnerability scanners
What to know first
- No free plan
- Pricing is available only on request
- Device limit is 199
- Not compatible with Canonical Livepatch
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Enterprise | Everything in Standard · single sign-on · high availability · onboarding support · dedicated CSM · agreement redlines · vendor security review | On request |
| Starter | Up to 199 systems · 70+ distro versions · rebootless kernel patching · up to 100% CVE coverage · unlimited kernel patching lifetime | On request |
| Standard | Everything in Starter · centralized management · customizable patching workflows · air-gapped deployment · multiple users/business units · shared-library patching add-on | On request |
As tuxcare.com lists them, read 9 Oct 2026. The maker's own page has the final word.
Verdict
KernelCare Enterprise focuses on rebootless Linux kernel patching with centralized and offline deployment options. Its trial allows evaluation, but organizations must account for compatibility limits, device capacity, and request-based pricing.
Facts from KernelCare Enterprise's own pages
- Air-gapped support
- The vendor says ePortal can automatically deploy patches in air-gapped environments. · docs.tuxcare.com, 9 Oct 2026
- Architecture
- KernelCare is available for x86-64 Intel and AMD systems and ARM64 systems. · docs.tuxcare.com, 9 Oct 2026
- Company history
- TuxCare says KernelCare Enterprise launched in 2014 and describes TuxCare as having spun off from CloudLinux to become independent. · tuxcare.com, 9 Oct 2026
- Compatibility limit
- KernelCare is not compatible with Canonical Livepatch and should not be used on the same system. · docs.tuxcare.com, 9 Oct 2026
- Compliance
- TuxCare states that its SOC 2 Type II report covers technical and internal operational controls regarding security and availability. · tuxcare.com, 9 Oct 2026
- Encryption
- TuxCare states that it encrypts data in transit using TLS 1.2 and data at rest using AES-256 server-side encryption. · tuxcare.com, 9 Oct 2026
- Patch duration
- Each kernel receives live patches for as long as its vendor releases security updates for that kernel series. · docs.tuxcare.com, 9 Oct 2026
- Patch management
- The optional on-prem ePortal management server lets organizations define rollout policies and control which machines receive patches and when. · docs.tuxcare.com, 9 Oct 2026
- Purpose
- KernelCare provides security patches for supported Linux kernels that can be installed without rebooting the system. · docs.tuxcare.com, 9 Oct 2026
- Scanner integrations
- KernelCare documentation names Tenable Nessus, Qualys and Rapid7 among the vulnerability scanners it integrates with natively. · docs.tuxcare.com, 9 Oct 2026
- Support
- TuxCare says its live-patching products include technical support with 24/7/365 access to engineers through its support portal and online knowledge base. · docs.tuxcare.com, 9 Oct 2026
- Supported systems
- KernelCare supports Enterprise Linux distributions including RHEL, Oracle, Rocky, AlmaLinux and CentOS, as well as Ubuntu and Debian. · docs.tuxcare.com, 9 Oct 2026
- Trial
- KernelCare documentation says a free trial license lasts 30 days. · docs.tuxcare.com, 9 Oct 2026
- Vulnerability response
- TuxCare says it aims to deliver patches for vendor-fixed CVEs within 10 days of public disclosure, while noting complex fixes can take longer to develop and test. · docs.tuxcare.com, 9 Oct 2026
Where KernelCare Enterprise stands on Freedom251
- Patch Management Software#22 of 49
- IT Automation Software#42 of 77