The PantaRhei project investigates techniques to securely and automatically update software with minimal impact on every-day user and device operations. To this end, PantaRhei exploits live update techniques to automatically install security patches on the fly and software hardening techniques to automatically generate safe, “workaround” security patches. It also explores the residual attack surface beyond software security vulnerabilities (i.e., hardware vulnerabilities).