What Ubuntu Pro actually covers — and who should be paying for it

Ubuntu Pro explained: 36,000+ patched packages, up to 15 years of security maintenance, Livepatch, Landscape and compliance tooling in one subscription — and how to check what your own estate is running.

Category: Cloud & Infrastructure · Published: August 6, 2026 · 9 min read · Author: ZM Technologies Team

Most people running Ubuntu in production have heard of Ubuntu Pro and assume it is a support contract. It is broader than that, and the gap between what people assume and what is actually included is where most of the value sits.

Start with what is free\n\nUbuntu LTS releases ship every two years in April, and the version number is the date: 22.04 is April 2022, 24.04 is April 2024. Free, you get five years of security maintenance for packages in Ubuntu's Main repository, covering the operating system and its core components.\n\nIt does not cover the Universe repository, which is where most of the applications your teams actually deploy live. After five years, patches stop. Ubuntu 22.04 reaches that point in April 2027.

What the subscription adds\n\n### Coverage across 36,000+ packages\n\nExtends security patching to over 36,000 open source packages in the Universe repository for up to ten years: Python, Go, Rust, Ruby, Redis, Valkey, etcd and the long tail of things your applications depend on. The infrastructure-only tier covers over 4,700 packages in Main for an additional five years.\n\nThis is the part people underestimate — if your teams are pulling packages from community repositories and patching them by hand, that work is already being done for you inside a subscription.\n\n### Lifecycle to 15 years\n\nFive years standard, ten with Ubuntu Pro, fifteen with the Legacy add-on. If an application is certified against a specific Ubuntu release, you can stay on it and stay patched.\n\n### Kernel patching without reboots\n\nLivepatch applies critical and high-severity kernel fixes to running systems.\n\n### Compliance tooling\n\nCIS and DISA-STIG hardening profiles via the Ubuntu Security Guide, plus FIPS-certified cryptographic modules. If you are working toward PCI-DSS, HIPAA, ISO 27001 or a government standard, these are the controls that get asked about.\n\n### Fleet management\n\nLandscape for centralised patching, monitoring, alerting and compliance reporting across physical, virtual, cloud and desktop machines. MAAS for bare-metal provisioning. Juju for application lifecycle automation. All included.

How it is licensed\n\nPer machine, per year, with a server subscription covering unlimited virtual machines on that host. No socket, core or CPU counting. Enterprise support is a separate tier added on top, at 24/7 or weekday availability. On public cloud, Ubuntu Pro is metered hourly through your cloud bill. Personal use is free for a small number of machines.

Checking what you are running\n\nIf you already have Ubuntu servers, three commands tell you where you stand.\n\nbash\npro status --all # what is entitled and enabled\npro security-status # coverage breakdown by source\npro fix CVE-2024-XXXX # remediate a specific CVE\n\n\nRun pro security-status on a production box and you will see how many installed packages fall outside standard security maintenance. For most estates the number is larger than expected.

Who should be looking at this\n\nYou should look at Ubuntu Pro if:\n\n- You are on 20.04 or 22.04 with applications pinned to that release\n- You deploy open source applications from Ubuntu repositories at any scale\n- You have a compliance regime requiring documented patching\n- You are paying separate enterprise subscriptions for data platforms where you only need patching and support\n- You manage more than a handful of machines with no central patching tool\n\nIt matters less if you are a small estate on the current LTS with plenty of runway and no compliance requirement.

Next step\n\nZM Technologies is an authorized Canonical partner. We will run a coverage assessment against your actual estate: which machines, which packages, what is exposed, and what a right-sized subscription looks like.\n\n- Ubuntu Pro subscriptions and platform migration — our full solution page, including how we run migrations.\n- Cutting recurring virtualization costs: what migrating to Ubuntu actually changes — if virtualization renewals are what brought you here.