Automox vs. AWS Config

It's excellent when it comes to patch management. We have all our patches (per OU) set up to run on different days, and get detailed reports on which patches have failed and for what reason. We've also been able to push out windows 11 via Automox too, which for a business with a lot of users, makes live so much easier

Incentivized

It's really good if your infrastructure services is all in AWS, that means everything could be audited and monitored using AWS config. You also can create alarms to notify you or your team about any changes on your AWS resources which is very useful to prevent abuse if you have a fairly large team. It's also very useful whenever some third party wants to audit your AWS resources, if you have a fairly comprehensive AWS config configured, the auditing process will be easy since they only need to look at your AWS config setup.

Incentivized

• Shows applications installed on a specific asset
• Able to push policies and updates remotely , creating policies is easy.
• Keep track of compliant devices and when is the last time they have connected to the servers
• All the great information provided within one single device

Incentivized

• The ability to track changes in AWS is paramount, AWS config allows you to do this
• Allows the auditing of an AWS account
• Can view history of an account that has AWS config enabled

Incentivized

• Server patching orchestration. There is no way to patch and reboot systems in order of importance, such as database servers before application servers.
• Worklets for patching .net core and similar.
• Worklets for removing unwanted Java installs or other unwanted software.
• Integration with Tenable Vulnerability Management.
• AI script development should be included at no additional cost; GPT or Gemini can be used instead for free and pasted into Automox. Why charge when others are free?
• Official worklets are slow to be added or updated.

Incentivized

• It's only AWS, no third party.
• Not the most intuitive interface, but with a little getting used to it is OK.

Incentivized

This is a software that just works. Once configured its a set and forget kind of tool that keeps things up to date and alerts me if something is wrong. I was able to work through an expansion project to deploy an additional 500 devices in almost no time and create a robust self-patching environment.

Incentivized

The dashboard provides a quick overview of our current status regarding complaints and outstanding patches, while also enabling us to focus on high-priority and critical patching and understand why older patches remain outstanding. The reporting provides a vast amount of information, depending on the requirements. Although the analytics feature is new, there is significant potential to offer even more impactful insights.

Incentivized

Would rate lower for other workloads but for AWS workloads its simple to set up, cost effective and customisable. Primary use case is compliance from a governance perspective.

Incentivized

I did not need to reach out to support often but when I did the answers were relatively correct and they were answered quickly. The only thing I might "ding" their support on was their lack of understanding of OS's different from Windows and especially Linux. Other than that I was satisfied

Incentivized

Implementing Automox successfully starts with a clear strategy for organizing and grouping devices based on operating systems, environments, or business criticality. This ensures that patching and configuration policies can be applied with precision. A phased rollout approach is essential—beginning with a pilot group allows teams to test patching schedules, reboot behaviors, and custom Worklets before scaling across the organization. Leveraging Worklets from the start can significantly boost automation by enforcing security baselines and performing routine system tasks. Integration with existing SOC tools, such as SIEMs, enhances visibility and response time by correlating patch compliance with threat intelligence. Additionally, aligning patching schedules with operational downtimes minimizes disruptions, and consistent monitoring and reporting helps maintain compliance and prepare for audits. Overall, Automox offers a streamlined and effective solution, but its true value is unlocked through thoughtful planning, testing, and integration with existing IT and security workflows.

Incentivized

While not a direct analog, we have noted that our A/V provider also handles patching. That being said, the solution is not as al la carte as Automox, and requires much more thought to implement. Automox is a favorite for its lightweight nature and it's time to implementation being measured in minutes, not hours or days.

Incentivized

I do not know or have used any other product in AWS cloud space that matches what AWS Config provides. We have some custom built monitoring and governance, however that is there because AWS Config does not provide it currently.

Incentivized

• At the base tier, it is well worth the cost and has freed up a lot of time for me to work on other tasks. That's a net gain to me.
• Better visibility into the update status and risk certain client machines have. Then I know what clients need my attention most.

Incentivized

• Enforcing audit requirements
• Easy to set up alerting when there are rule breaches
• Auto remediation reduces the manual policing of such breaches

Incentivized