Howdy, folks.
I'd like to suggest that you guys partner with a Security vendor to offer active patching for Proactive Exposure Management. For example, Darktrace has a product called PEM - Proactive Exposure Management that leverages critical attack paths to prioritize patching cycles that break the kill chain.
With PMPC providing third-party application patching and gathering telemetry from vulnerability solutions, active patching can even be automated from a critical attack path perspective.