Microsoft service for early Patch Tuesday notifications now available only to paying customers
Context & Ripple Effects
In mid-January 2015 — days before Microsoft pushed its critical Windows 8.1 fixes — Threatpost reported that the company's advance Patch Tuesday notification service would henceforth be available only to paying customers, ending free early sight of upcoming vulnerabilities. The change converts what had been a courtesy to the wider defender community into a paid feature.
That lever keeps resurfacing across the decade of related coverage: a 2024 Directions on Microsoft analysis argued the company should stop charging subscribers extra for must-have security features, and by July 2025 Microsoft had curtailed Chinese companies' access to advance notifications via MAPP while probing the SharePoint breach. Paywalling early notice was the first step in treating pre-patch information as a rationed asset.
First-order effects
- Organizations without premium support contracts lose their pre-patch head start: they learn of critical flaws, such as the Word bug later fixed in the April 2017 Patch Tuesday release, only when updates ship publicly.
- Paying enterprise customers retain the early-warning window, making premium Microsoft support agreements a de facto prerequisite for same-day patch planning.
Second-order effects
- Security teams priced out of the service must either upgrade to paid support or buy substitute early-warning intelligence from consultancies and threat-intel vendors, opening a market Microsoft's pricing now anchors.
- Critics gain standing ammunition — the 2024 argument that Microsoft should not charge extra for must-have security extends directly from this paywall, pressuring the company toward more transparent breach and patch communication.
Third-order effects
- If the pattern holds, advance vulnerability information stops being openly shared and becomes a managed product whose distribution Microsoft controls by contract tier and — as the 2025 MAPP curtailment of Chinese companies showed — by geopolitical screening during incident response.
- Industry-wide, pre-disclosure intelligence hardens into a competitive asset: vendors who share early warnings widely accept a defensive disadvantage against rivals who meter them, shifting norms toward gated access as the default.
The trend: Microsoft is converting advance vulnerability intelligence from an open courtesy into a metered product, with access increasingly governed by payment and, later, national-security considerations.