Hi @Christiaan Heerze ,
WSUS offline is your only option for "free", otherwise you can use Microsoft Endpoint Configuration Manager (previously SCCM) but at a cost, or any other third-party tools.
For the WSUS offline, you'll need to ensure it is configured properly, you would use two (2) WSUS servers, one (1) which is online to fetch the updates, and export/copy them to media. Then you would have another one (1) WSUS server which is disconnected, for importing the updates from the export/copy and actually distributing them to your client systems based on need.
Set Up a Disconnected Network (Import and Export Updates)
https://learn.microsoft.com/de-de/security-updates/windowsupdateservices/18127442
----------
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Best regards,
Leon