Debian system monitor (Ubuntu and RPi)

Is it possible to upgrade the OS remotely as well and receive warnings if there’s a newer release out?

I like to keep things secure, but it’s hard to SSH into all these. If unattended-upgrades fails for some reason, it’d be good to know.

For me, monitoring the state of all my Pis is great (I have 20 active around the house), but I’d also like to ensure they’re not posing security risks either.