1. A method for management of virtual machines, the method comprising: detecting initiation of a virtual machine; in response to the detecting, initiating the virtual machine in a management environment having restricted access and isolated from a virtual machine operational environment; scanning the virtual machine in the management environment to detect a patch compliance state; applying one or more patches to the virtual machine in the management environment based upon the patch compliance state; and deploying the virtual machine to the operational environment.