99% of the time, the issue is that the clients are not reporting properly.
The other 1% is they are missing a prerequisite.
https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/
Follow my guide - run from the top > down. If the client side script doesn't fix the issue, the troubleshooting steps below will figure out where the cause is.