Vulnerability scanner for disconnected PCs

Currently looking for a vulnerability scanner / patch management solution for standalone, non-interconnected Windows PCs. Moving signatures / plugins to and results from is okay, but I don't have the ability to orchestrate or centralize a scanning solution like Tenable.sc. I have played around with cab file scanning (wsusscn2.cab) but would really like a more robust detection (to include some third-party apps) and reporting capabilities (tied to NVD info).

VMs and containers are out of the question, and I would …

apps capabilities containers cybersecurity detection don file info management moving non nvd party patch patch management pcs plugins reporting results scanner scanning signatures solution tenable third third-party vms vulnerability vulnerability scanner windows