PatchRadar
PatchRadar 🛡️
Know when your software is vulnerable — before attackers do.
PatchRadar monitors CVE feeds in realtime and alerts you when a new vulnerability affects your software stack. No more manually checking NVD, MSRC, or Snyk — just add your software and let PatchRadar watch for you.
✨ Features
- 🔍 Realtime CVE monitoring — scans NVD, MSRC and Debian Security Tracker for new vulnerabilities
- 📋 Personal watchlist — add any software you want to monitor
- 🎨 Beautiful web UI — dark theme dashboard with charts and filters
- 💻 CLI first — full command line interface for automation
- 📊 CVSS scoring — color-coded severity (Critical / High / Medium / Low)
- 🐧 Debian Security Tracker — monitors open CVEs for Debian/Ubuntu packages
- 💾 Local SQLite — all data stored locally, no cloud, no account needed
- 🐍 Python 3.11+ — modern async architecture with httpx and FastAPI
🚀 Installation
pip install patchradar
📖 Usage
CLI
# Add software to your watchlist
patchradar add proxmox
patchradar add bitwarden
patchradar add "windows 10"
# Show your watchlist
patchradar list
# Scan for CVEs (last 30 days)
patchradar scan --days 30
# Show latest CVEs in terminal
patchradar status
# Remove software
patchradar remove proxmox
Web UI
patchradar serve
# Open http://localhost:8000
📡 Sources
| Source | Type | Status |
|---|---|---|
| NVD | CVE Database | ✅ Active |
| MSRC | Microsoft Patch Tuesday | ✅ Active |
| Debian Security | Linux packages | 🔜 Coming soon |
| CISA KEV | Known Exploited Vulnerabilities | 🔜 Coming soon |
🗓️ Versioning
PatchRadar uses CalVer — YYYY.MM.PATCH.
⚡ Benchmarks
Performance is tracked continuously with CodSpeed. The benchmarks live in benchmarks/ and cover the CVE collectors, the SQLite layer, the API endpoints and the CLI table rendering.
poetry install --with dev
poetry run pytest benchmarks/ # correctness check, no measurement
codspeed run --mode simulation -- poetry run pytest benchmarks/ --codspeed
🤝 Contributing
Contributions are welcome! Feel free to open issues or pull requests.
📄 License
MIT — see LICENSE for details.
1 maintainer
Release files for patchradar 2026.9.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| patchradar-2026.9.3.tar.gz | 107.0 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| patchradar-2026.9.3-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 138.0 kB
Release files / patchradar-2026.9.3.tar.gz
| Download URL | patchradar-2026.9.3.tar.gz |
|---|---|
| Size | 107.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
a0398b683dba60c24d3f4a64f92742ac48fd1ae61c45b35b3d0a6eb781979684
|
|
BLAKE2b-256 checksum How to use checksums |
dddc954ff1d19657894d9f1f3f2ead59607874097d2f4ef7db7462ce49b7dc8b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency logRelease files / patchradar-2026.9.3-py3-none-any.whl
| Download URL | patchradar-2026.9.3-py3-none-any.whl |
|---|---|
| Size | 31.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3bf51edfc5bc3f87be7ce4467ad6645eb8e91b9474e884e62afb8023ec6975d8
|
|
BLAKE2b-256 checksum How to use checksums |
7cba0038777e298045feea55ad0f0f5cc1b6d9cd5aa6b60966cae681466ce502
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency log
