Mainstream support is the first major support phase in a software vendor’s lifecycle. During this period, the product typically receives security fixes, non-security bug fixes, feature or quality improvements, and standard technical support. It is the most actively maintained stage of a product’s life.
In cyber security, mainstream support matters because it gives defenders a predictable window for patching and planning. Once a platform leaves mainstream support and moves to extended support, the vendor’s focus usually narrows to security updates only, which can limit repair options and increase operational risk. Attackers often target unsupported or near-end-of-support systems because patch delays, legacy dependencies, and weak change control make exploitation easier. Security teams use support status for asset inventory, upgrade planning, and risk reviews so they can retire or modernize systems before maintenance becomes constrained.