"The beauty is in that we do not do "normal" updates but just patch the vulnerabilities in a non-obtrusive way, this prevents the website to fail because of incompatibilities"

Does this mean you're writing your own custom patches for every single versions of the software solutions you're supporting ?