Importing scans & reports
Your scanner already produces a weekly report; Patch Console turns it into work you can ship. Import the report and every actionable row becomes part of a patch group with a fix target, instead of a row in a spreadsheet.
What happens on import
The import wizard parses the report, dedupes CVEs, and maps each finding to a product that is actually installed on your fleet. Versions are normalized so "24.0.1" in the report and "24.0.1.0" on the device compare correctly. Rows that do not map to any installed software do not generate noise.
From findings to patch groups
Mapped findings are grouped per product with a fix target: the version at or above which the vulnerabilities are fixed. Severity is rolled up across the group's CVEs, so the queue reads "update Chrome on 42 devices", not four hundred CVE identifiers. Each group carries everything needed to deploy:
| What a patch group carries | Why it matters |
|---|---|
| Product | One group per product, so the fix is one deployment, not one per CVE. |
| Fix target version | The version the whole group is driven toward; the version gate and verification both measure against it. |
| Member devices | Every device currently below the fix target, on either delivery channel. |
| Severity rollup | The worst severity and KEV/EPSS signals across the group's CVEs, used for ordering and SLA tracking. |
| SLA clock | Time remaining against the severity's SLA tier. See Patch Report & Remediation Grade. |
Devices that show up later
Groups are not frozen at import time. Each ingest re-checks the fleet, and a device that appears below the fix target after the group was created (a new enrollment, a reinstall, a rollback) is swept into the existing group automatically, so nothing slips through between imports.
Imports and the daily engine together
Imported scanner findings and the built-in vulnerability engine land in the same findings model and the same patch groups. The import brings in your scanner's view on its weekly cadence; the daily engine keeps the picture current in between, using the inventory the agent reports the moment software changes.