This thesis was developed during a curricular internship at Leonardo S.p.A. , within the SCI division. Modern cloud infrastructures require continuous vulnerability remediation activities to maintain adequate security levels. As consequence a simple update mechanisms cannot be directly applied. In these contexts, organizations must balance the need for rapid vulnerability mitigation with requirements related to service continuity. This thesis addresses the problem of security patch management within the context of an Azure based infrastructure, where each tenant corresponds to a distinct client. The challenge is well known in the IT industry: Linux environments lack standardized patch scheduling mechanisms, and the fragmentation of security advisories across heterogeneous package repositories makes it difficult to maintain a consistent remediation pipeline.