Abstract: A system for protecting a computer network from vulnerabilities can be provided that generally includes a remedy and patch server located at a client site and adapted to receive a global remedy package and a global patch package. The global remedy package may include at least one remedy and the global patch package may include at least one patch. At least one remedy and optionally at least one patch can repair a vulnerability in the computer network. The system can further include at least one local remedy server adapted to communicate with the remedy and patch server for receiving at least one remedy. At least one local patch server may be adapted to communicate with the remedy and patch server to receive at least one patch. The system also generally includes a local computer system adapted to communicate, independently, with the at least one local remedy server and at least one local patch server for receiving, respectively, at least one remedy and optionally at least one patch.