Know when your software is vulnerable — before attackers do.
PatchRadar monitors CVE feeds in realtime and alerts you when a new vulnerability affects your software stack. No more manually checking NVD, MSRC, or Snyk — just add your software and let PatchRadar watch for you.
label=pypi)
- 🔍 Realtime CVE monitoring — scans NVD, MSRC and Debian Security Tracker for new vulnerabilities
- 📋 Personal watchlist — add any software you want to monitor
- 🎨 Beautiful web UI — dark theme dashboard with charts and filters
- 💻 CLI first — full command line interface for automation
- 📊 CVSS scoring — color-coded severity (Critical / High / Medium / Low)
- 🐧 Debian Security Tracker — monitors open CVEs for Debian/Ubuntu packages
- 💾 Local SQLite — all data stored locally, no cloud, no account needed
- 🐍 Python 3.11+ — modern async architecture with httpx and FastAPI
pip install patchradar# Add software to your watchlist
patchradar add proxmox
patchradar add bitwarden
patchradar add "windows 10"
# Show your watchlist
patchradar list
# Scan for CVEs (last 30 days)
patchradar scan --days 30
# Show latest CVEs in terminal
patchradar status
# Remove software
patchradar remove proxmoxpatchradar serve
# Open http://localhost:8000| Source | Type | Status |
|---|---|---|
| NVD | CVE Database | ✅ Active |
| MSRC | Microsoft Patch Tuesday | ✅ Active |
| Debian Security | Linux packages | 🔜 Coming soon |
| CISA KEV | Known Exploited Vulnerabilities | 🔜 Coming soon |
PatchRadar uses CalVer — YYYY.MM.PATCH.
Performance is tracked continuously with CodSpeed. The benchmarks live in benchmarks/ and cover the CVE collectors, the SQLite layer, the API endpoints and the CLI table rendering.
poetry install --with dev
poetry run pytest benchmarks/ # correctness check, no measurement
codspeed run --mode simulation -- poetry run pytest benchmarks/ --codspeedContributions are welcome! Feel free to open issues or pull requests.
MIT — see LICENSE for details.
Built with ❤️ by maksimtech