PatchRadar
PatchRadar 🛡️
Know when your software is vulnerable — before attackers do.
PatchRadar monitors CVE feeds in realtime and alerts you when a new vulnerability affects your software stack. No more manually checking NVD, MSRC, or Snyk — just add your software and let PatchRadar watch for you.
✨ Features
- 🔍 Realtime CVE monitoring — scans NVD, MSRC and Debian Security Tracker for new vulnerabilities
- 📋 Personal watchlist — add any software you want to monitor
- 🎨 Beautiful web UI — dark theme dashboard with charts and filters
- 💻 CLI first — full command line interface for automation
- 📊 CVSS scoring — color-coded severity (Critical / High / Medium / Low)
- 🐧 Debian Security Tracker — monitors open CVEs for Debian/Ubuntu packages
- 💾 Local SQLite — all data stored locally, no cloud, no account needed
- 🐍 Python 3.11+ — modern async architecture with httpx and FastAPI
🚀 Installation
pip install patchradar
📖 Usage
CLI
# Add software to your watchlist
patchradar add proxmox
patchradar add bitwarden
patchradar add "windows 10"
# Show your watchlist
patchradar list
# Scan for CVEs (last 30 days)
patchradar scan --days 30
# Show latest CVEs in terminal
patchradar status
# Remove software
patchradar remove proxmox
Web UI
patchradar serve
# Open http://localhost:8000
📡 Sources
| Source | Type | Status |
|---|---|---|
| NVD | CVE Database | ✅ Active |
| MSRC | Microsoft Patch Tuesday | ✅ Active |
| Debian Security | Linux packages | 🔜 Coming soon |
| CISA KEV | Known Exploited Vulnerabilities | 🔜 Coming soon |
🗓️ Versioning
PatchRadar uses CalVer — YYYY.MM.PATCH.
⚡ Benchmarks
Performance is tracked continuously with CodSpeed. The benchmarks live in benchmarks/ and cover the CVE collectors, the SQLite layer, the API endpoints and the CLI table rendering.
poetry install --with dev
poetry run pytest benchmarks/ # correctness check, no measurement
codspeed run --mode simulation -- poetry run pytest benchmarks/ --codspeed
🤝 Contributing
Contributions are welcome! Feel free to open issues or pull requests.
📄 License
MIT — see LICENSE for details.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file patchradar-2026.8.30.tar.gz.
File metadata
- Download URL: patchradar-2026.8.30.tar.gz
- Upload date:
- Size: 45.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
cb4f860b2ff2d6184530def3722d679dfdde347e08708dd062bae4001eb197a1
|
|
| MD5 |
97dd63b5211c7aec0c675c1c16ae99cc
|
|
| BLAKE2b-256 |
eb00b9abd7f58b5ee286eb964d1bb69b056acd8519f188d8159a0f9fe90dab5f
|
Provenance
The following attestation bundles were made for patchradar-2026.8.30.tar.gz:
Publisher:
publish.yml on maksimtech/patchradar
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
patchradar-2026.8.30.tar.gz -
Subject digest:
cb4f860b2ff2d6184530def3722d679dfdde347e08708dd062bae4001eb197a1 - Sigstore transparency entry: 2534278044
- Sigstore integration time:
-
Permalink:
maksimtech/patchradar@141bbe7e53c3e7e99d6742e59fb072fbe59ef34c -
Branch / Tag:
refs/tags/2026.8.30 - Owner: https://github.com/maksimtech
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@141bbe7e53c3e7e99d6742e59fb072fbe59ef34c -
Trigger Event:
release
-
Statement type:
File details
Details for the file patchradar-2026.8.30-py3-none-any.whl.
File metadata
- Download URL: patchradar-2026.8.30-py3-none-any.whl
- Upload date:
- Size: 20.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
33a6f0b07aa43251e5f6b12c09a865d7d29dde3bd8ba77f4a79e18b8c0775e81
|
|
| MD5 |
2ba46bcd47d08aa21318f650be38fe4c
|
|
| BLAKE2b-256 |
23df2762da0e02cb9f383ff83d2f5f5b3f459c7f895084a60b507ff9f79fc3b6
|
Provenance
The following attestation bundles were made for patchradar-2026.8.30-py3-none-any.whl:
Publisher:
publish.yml on maksimtech/patchradar
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
patchradar-2026.8.30-py3-none-any.whl -
Subject digest:
33a6f0b07aa43251e5f6b12c09a865d7d29dde3bd8ba77f4a79e18b8c0775e81 - Sigstore transparency entry: 2534278219
- Sigstore integration time:
-
Permalink:
maksimtech/patchradar@141bbe7e53c3e7e99d6742e59fb072fbe59ef34c -
Branch / Tag:
refs/tags/2026.8.30 - Owner: https://github.com/maksimtech
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@141bbe7e53c3e7e99d6742e59fb072fbe59ef34c -
Trigger Event:
release
-
Statement type:
