Take control of every Linux update. DiscoveredApprovedPatched
PatchMon deploys updates and tracks history across your Linux and FreeBSD estate. No SSH marathons, no one-off scripts, no spreadsheets.
55K+
Servers run PatchMon
4K+
Live installations
2.5K+
GitHub Stars
600+
Discord community
Sound familiar?
This is what patch day looks like
without a system.
The SSH marathon
SSH into every host. Run apt update. Check the output. Repeat 47 times. Miss the one that matters.
No audit trail.
The Ansible sprawl
Playbooks for three distros. Dry-run output nobody reads. “Did that run?” “I think so.” No way to know without SSH-ing in again.
No single view.
The spreadsheet
Paste hostname, paste date, paste “done.” Auditor asks for evidence. You open the spreadsheet. You pray.
No evidence.
PatchMon replaces all three with one queue.
Why teams switch
Your Monday shouldn't be a
patch reconnaissance tour.
The work you spread across scripts, SSH sessions, and spreadsheets is the work PatchMon turns into a single queue: what's pending, who approved it, what shipped, and what to tell an auditor.
Six package managers. Dry-run before you ship. Full audit trail.
See every pending update across APT, DNF/YUM, APK, Pacman, FreeBSD pkg, and Windows Update in one view. Define patch policies with scheduling (immediate, delayed, or fixed maintenance windows). Preview what will change with dry-run mode. On Linux and FreeBSD, require approval before production patches run, with full shell output for your audit trail. On Windows, you get the same visibility and planning today; patch deployment from PatchMon is on the roadmap.
Learn more
The compliance report your auditor actually wants.
Run OpenSCAP CIS benchmark scans against your servers and Docker Bench assessments against your container hosts. See exactly which rules pass and fail, with severity levels and remediation steps for each failure. Track compliance scores over time. When the auditor asks for evidence, the report is ready in minutes, not days.
Learn more
SSH and RDP from your browser. Zero exposed ports.
Click on any host and open a terminal or RDP session directly in PatchMon. Connections can route through the agent’s outbound link so SSH and RDP are not broadly exposed on managed hosts. No VPN required. An optional AI terminal assistant can help with commands and error diagnosis when you need it.
Learn more
And more
Docker, alerting, and access control — built in, not bolted on.
Docker Monitoring
Inventory every container, image, volume, and network across your fleet. Detect outdated base images with digest comparison and security severity tracking.
Learn moreAlerting
Route alerts by severity and host group to Slack, Discord, email, or ntfy. Assign to team members, track to resolution. Host-down detection on a steady cadence.
Learn moreRBAC & Security
Granular roles and custom permissions. OIDC/SSO, Discord sign-in, TOTP two-factor auth, session management, and separate agent credentials.
Learn moreTime to value
From signup to your first host on the dashboard in minutes, not days.
Sign up and choose a region
Create your PatchMon Cloud account and pick a region close to your fleet
Add your first host
Copy the one-line agent install command from the dashboard
Review available patches
Your hosts, packages, and pending updates appear in one view
Approve and ship (Linux & FreeBSD)
Pick hosts and packages, then let automation apply updates with a trail. On Windows, monitor and plan today; deploy from PatchMon is on the roadmap.
Outcomes
Move from ad-hoc to audited, in weeks not quarters.
What actually changes on your fleet after PatchMon is installed.
APT, DNF, APK, Pacman, pkg, and Windows Update in a single view. Pending updates, patch drift, and compliance coverage visible at a glance.
Every run is logged with approver, targeted hosts, packages changed, and outcome. Export the trail for SOC 2, ISO 27001, or internal review.
OpenSCAP CIS benchmarks and Docker Bench run on a schedule. Scheduled patch reports land in email, Slack, or a webhook without anyone driving them.
Integrations
Fits the stack you already run.
Proxmox auto-enrolment, Ansible inventory, dashboard widgets, webhooks, and a REST API, so PatchMon sits next to the tools your team already trusts, not instead of them.
Agent builds: amd64·arm64·arm·i386 — Linux, FreeBSD, Windows.
Choose your path
Same codebase. Two ways to run it.
PatchMon Cloud
We run it. You patch.
- Dedicated, isolated service per customer with managed backups and uptime
- Starter $1, Plus $2, Max $3 per host/month
- 14-day free trial on real hosts
- Tiered support included
- UK, EU, and US data residency
Community Edition
You run it. You own it.
- Self-host on your own infrastructure
- Free under AGPLv3 — audit every line
- Docker Compose or bare metal install
- Community Discord support
- Same codebase as Cloud
PatchMon PRO
Need enterprise support or a custom deployment?
PRO is for teams running PatchMon at scale who need dedicated engineering support, deployment architecture, custom integrations, or managed on-premise delivery. You bring the requirements, we scope it.
Deployment & architecture
High-availability design, multi-site planning, and database tuning for fleets of 1,000+ hosts.
Training & onboarding
Hands-on admin sessions on patch policies, compliance scanning, and alert routing.
Priority support
Dedicated support channel with defined SLAs and direct access to engineering.
Custom development
CMDB, ITSM, notification, and API integrations built to your team's spec.
Managed deployment
We deploy and run PatchMon on your infrastructure, including air-gapped environments.
Security & compliance
Patch policies and compliance configurations aligned to your regulatory frameworks.
See every host in one place.
Your infrastructure, your choice.
Let us run the control plane on PatchMon Cloud, or self-host Community Edition under AGPLv3 on your own infrastructure. Same codebase, two ways to run it.
Prefer to talk first? Book a demo →