Patch management in a hybrid computing environment

Techniques for managing performing patches on a workload associated with a computing platform are presented. A patch identifier component can identify the workload associated with the computing platform. The workload can comprise a first workload portion upon which a first subset of patches can be performed offline and a second workload portion upon which a second subset of patches can be performed online. A patch management component can determine, for the first workload portion, a portion of the first subset of patches that can be performed within a maintenance time window while offline based on vulnerability scores of patches of the first subset of patches, and can determine, for the second workload portion, the second subset of patches that can be performed while online. The patch management component can determine the vulnerability scores of the patches of the first subset of patches based on importance levels of the patches.