PATCH.works by Infodas is designed for environments where systems are physically or logically separated, requiring manual updates. It supports secure, reliable, and efficient maintenance operations for protected systems, especially during the installation of updates and patches. PATCH.works includes two modules: the Data Collection Service (DCS) in the low domain and the Data Distribution Service (DDS) in the high domain. The DCS collects the updates required by the system based on predetermined parameters and connects to the DDS via a secure network. PATCH.works can use a firewall, a DMZ, or an implemented Cross Domain Solution like the infodas SDoT product line. It ensures system isolation by locating both modules in virtual environments in their respective domains. PATCH.works uses hash and signature checks to guarantee data integrity for distribution. It can keep highly complex systems with different classification levels up to date, even in standalone mode or closed networks. For systems in restricted areas with national-level security requirements, the DCS can connect and support the DDS via a cross-domain solution like the SDoT Security Gateway. PATCH.works facilitates efficient update and patch processes while complying with security standards. It collects updates from multiple open sources and distributes them securely. PATCH.works continuously searches for updates from cleared providers and distributes them via secure connections, allowing systems with specific security requirements to use current software without breaching security. The administration of the different DCS and DDS components is done via a web-based portal that combines all system functions. The update installation takes place either through authorization within an update service or manually by the administrator.