Software Deployment Automation

Software Deployment Automation allows MSPs to push software remediation actions and new software installations directly through supported RMM and endpoint management integrations. Rather than requiring teams to manually download installer scripts, upload them into an RMM, and deploy them device by device or through custom workflows, Software Deployment Automation allows MSPs to take action directly from the Cork Vantage platform.

Supported RMMs

We currently support Intune, NinjaRMM, DattoRMM, VSA X, and ConnectWise Automate, with more to come.

Requirements

Each vendor has it's own requirements that need to be met:

• Intune

  • Those with pre-existing single-tenant Microsoft integrations will need to repair their connection to update OAuth permissions. (Note: Those with multi-tenant connections will automatically update).

  • NOTE: Intune does not queue executions. If you attempt to run as system on an offline endpoint or as a user and there is no one signed on, it will fail.

• NinjaRMM

  • Those with pre-existing integrations will need to reconnect them to use the new OAuth flow, view updated steps at 📄 NinjaRMM

  • Scripts created for each package manager you intend to use 📄 Software Automation for NinjaRMM

• DattoRMM

  • Scripts created for each package manager you intend to use 📄 Software Automation for DattoRMM

• VSA X

  • Scripts created for each package manager you intend to use 📄 Software Automation for VSA X

• ConnectWise Automate

  • Those with pre-existing integrations will need to update their user class to have their permissions updated 📄 ConnectWise Automate

FAQ

Can I deploy to multiple devices at once?
Yes. Bulk remediation is supported, so you can patch multiple or all vulnerable devices in a single action.

Is remediation fully automated now?
Yes, after initial setup, please see 📄 Automated Software Remediation

What happens if remediation fails?
Scheduled remediations will automatically retry at the next scheduled time slot. If a manual installation is done then a retry will not occur.

Can vulnerabilities be silenced?
After pushing a software installation, Cork will attempt to silence any associated vulnerabilities. Silencing can also be done manually via the action button in the software vulnerability table. Vulnerabilities should be manually silenced when the team is aware of them but intends to address them later according to a planned schedule.

Does silencing remove the risk score impact?
No. Silencing a vulnerability does not remove it or eliminate its risk score impact.

Is this replacing RMM patching?
Not entirely. Most RMMs either do not support automated patching broadly or only monitor a limited number of software titles. Cork expands practical remediation coverage significantly through popular package managers and now helps push those actions directly into supported RMM platforms. Scheduled automation may expand that role further in the future.