Please recommend: Vulnerability scanning and 3rd party software patch management for domain

[bledd]

Currently we use PDQ Inventory & PDQ Deploy to cover most 3rd party patches, which is excellent.

We're after another piece of software to scan for missing updates etc. Have been using LanGuard, but find it pretty lacking in terms of scanning.

Any other recommendations?

~300 clients, 35 servers.