1. A method for patch management of virtual machines, the method comprising: detecting deployment of a virtual machine at a first network location; in response to the detecting, mounting a drone of the virtual machine at the first network location in a management environment; scanning the drone at the first network location to detect a patch compliance state; communicating the patch compliance state to a patch service at a second network location; applying one or more patches to the drone with the patch service based upon the patch compliance state; and saving the drone as the virtual machine at the first network location; and deploying the virtual machine at the first network location in an operational environment.