I can personally compare two products we were using: Ivanti Third-Patch for SCCM before and PatchMyPC now. From my experience, PatchMyPC is much more stable, has more features such as application publishing, easier to use with a lower price. Also their Advanced Insign product looks promising. Product integration with SCCM is really simple. Customer Support is great. I really like the product.

Having to manage the IT of thousands of machines can be really challenging and something that can often be overlooked is patch management, we decided to give the PatchMyPC a trial while we were going for our Cyber Essentials Plus certification which requires you to have no CVE's higher than 7.0. We soon realised we had a lot of work on our hands, and PatchMyPC took all the stress out of it, it was just a set and forget! We use it via Intune only so can't comment on the Active Directory side but I'm sure it's just as simple to use. I would highly recommend it to anyone who is security conscious or very busy IT teams.

Once setup, I can almost forget about it. Apps are kept up to date automatically and it is very easy to provision new programs