With Auto Healing, it's possible to automatically fix up to 80% of the vulnerabilities found internally. This lets you handle the bulk of detected vulnerabilities much faster and more efficiently.
It's important to point out that Auto Healing is not meant to replace an existing patch management system. This feature is more about supporting you, so you can reduce the number of required actions significantly. The goal is to improve the security of your systems while making your workload lighter.
No, there are no extra costs. The functionality is included in the current license price. (lywand, isn’t it?)
No, Auto Healing is not enabled by default. This makes sure there are no unintended changes on customers’ systems.
You can use Auto Healing separately for every customer in the platform. Go to the customer in question and navigate to the menu: “Customer Management > Auto Healing”.
Now you can select which products should get automatic updates installed.
Depending on the product, there are different options (e.g. install updates, minor updates).
You can also set which devices Auto Healing should be automatically enabled on. There’s a difference between client devices and server devices.
Once it's enabled, you can set individual devices to active or inactive in your infrastructure.
Auto Healing is available starting with Agent Version 1.5.14.
Microsoft Windows Suite (Windows, Microsoft Office, etc.)
Java (JRE)
Mozilla Firefox
Foxit Reader
This list will grow in the future.
Auto Healing does automate patching, but it won’t force any required device restarts. Also, potential incompatibilities after a software update aren’t addressed.
Auto Healing always runs shortly after a check is carried out on your internal clients/servers. Ideally, the Auto Healing process (if needed) is done once a day.
Before you start activating Auto Healing, please note that lywand needs access to the following URLs:
Java
https://javadl.oracle.com
https://javadl-esd-secure.oracle.com
https://download.oracle.com
Firefox
https://download.mozilla.org
https://product-details.mozilla.org
Foxit
https://www.foxit.com
https://cdn01.foxitsoftware.com
No, the lywand Agent doesn't have rollback functions that can be used to undo an update made by Auto Healing. So please make sure before activating Auto Healing that there can't be any incompatibility issues because of the current software versions.
If you still run into any complications, you can check in the Auto Healing Logs to see which update was done so you can manually step in if needed.
The auto healing feature can be used on all systems with the lywand Agent installed. So, this feature focuses on reducing the attack surface on Windows clients and servers.
You can see the number of automatically fixed vulnerabilities on the Security Dashboard.
There's also a new “Auto Healing” tab under the menu item “Technical Details > Check Insights” for each device. Here you can see a list of the performed activities.
All Auto Healing Logs can be found in their own menu item inside Technical Details.
We see Auto Healing as another dynamic part of our platform. So, there will be more features in the future to make things easier for you.
You can check the following points:
Does the vulnerability actually affect software that should be fixed by Auto Healing? 
See supported software under “Customer Management – Auto Healing”
Is the Auto Healing feature actually enabled for this specific device? See Infrastructure
Does the device need a restart? See “Technical Details – Check Insights”
Has a re-check already been carried out? See “Technical Details – Check Insights”
