Pick the products you use. When attackers start exploiting one of them, we email you within about an hour, in plain English, with exactly what to update.
Cancel any time. Prices in US dollars; you'll see any tax before you pay.
What to do: Upgrade Node.js; there is no workaround. Bun, Envoy, Python, .NET and PHP on Windows have also shipped fixes.
| Free | Pro | |
|---|---|---|
| Live board, flaw pages, version checker, device check | ✓ | ✓ |
| Monday Patch List newsletter (everything) | ✓ | ✓ |
| RSS feeds, calendars, Slack, Teams and Discord alerts | ✓ | ✓ |
| Email alerts for only your products, within about an hour | ✓ | |
| Monday summary of only your products | ✓ |
The same sources as the rest of the site: CISA's catalog of vulnerabilities known to be exploited, and the vendors' own security advisories from Microsoft, Google, Apple, Fortinet, Palo Alto Networks, Cisco, VMware, Ivanti and Citrix, which we check every hour. We only alert on flaws with confirmed real-world attacks.
Usually within about an hour of CISA or the vendor confirming attacks. Vendor-confirmed zero-days often reach you before CISA lists them.
Over 100 of the products small businesses and IT providers run, from Windows, iPhones and Chrome to FortiGate, Ivanti, Microsoft 365 and WordPress. Pick as many as you like and change them any time.
Yes, any time, from your account page. You keep Pro until the end of the period you've paid for, and you won't be charged again.
They stay free. Pro is for people who want alerts in their own inbox, plus a Monday summary of only their products.
No. Payments are handled by Stripe; we never see or store your card number. You'll get a receipt from Stripe for each payment.
Pro is provided under our terms of use and privacy policy. Questions: hello@patchsonar.com.