1. A computer-implemented method comprising: determining a first set of software patches based on a group of software patches installed on a computing device and a group of available software patches; receiving the first set of software patches over a network connection; after receiving the first set of software patches, determining a second set of software patches based on the group of software patches installed on the computing device and the first set of software patches, wherein the group of software patches installed on the computing device has changed since determining the first set; and installing on the computing device the second set of software patches.