It is an automated method that identifies prospective or known vulnerabilities that threat actors might exploit. Patching is the use of a vendor-supplied or internally produced security patch or fix to address a known vulnerability.