There are two different types of security updates:
Application Security Updates
Because any application can be installed on VPS, the VPS owner is responsible for ensuring application security is maintained by applying updates from vendors when necessary.
OS Security Updates
OS security on Windows VPSs is maintained by hostavps.com because of the tight integration between the virtualisation software and the OS. These security updates are applied after they have been approved to run on the VPS system. Windows VPS customers should not attempt to install any Windows Security Updates on their VPS, as this could result in VPS instability.
Linux kernels and modules are also updated by hostavps.com, but all other Linux OS files remain the responsibility of the customer to maintain.