Extended Security Update (ESU) is a vendor program that provides security patches after a product’s standard support period has ended. ESU does not usually add new features or broad maintenance; it is a temporary bridge that helps organizations keep exposed systems protected while they migrate, retire, or isolate them.
In cyber security, ESU matters because unsupported software becomes a faster target for attackers once regular fixes stop. If a vulnerability is found after end of support, ESU may be the only path to receive a patch without replacing the system immediately. Defenders use ESU as part of a larger plan that includes asset inventory, segmentation, hardening, monitoring, and a scheduled upgrade path. It reduces risk, but it is not a substitute for long-term remediation.