PatchMon
patchmon.net
What it is
PatchMon provides a central dashboard for patch monitoring across Linux, FreeBSD, and Windows server fleets. Policies can schedule patches immediately, after a delay, or at a fixed time, with dry-run validation, approval workflows, and assignment by host or host group. Automated patch deployment is available on Linux and FreeBSD; Windows deployment is on the roadmap. Patch runs record who triggered and approved them, timestamps, policy details, affected packages, and command output. OpenSCAP CIS benchmark scans include per-rule results, severity, remediation guidance, and score tracking. Listed integrations span Proxmox LXC, Ansible, Docker, REST API, OpenSCAP, SSH, Windows RDP, and messaging and AI services. Monitoring agents connect outbound over WebSocket, use TLS in transit, and do not require root for monitoring operations. The free Community Edition is self-hosted under AGPLv3, with users responsible for the server, updates, backups, and uptime. Cloud plans start at $1 a month per endpoint. Cloud trials last 14 days, include Plus features, require a card at signup, and are not charged if cancelled before they end.
Spec sheet
- What it does
- PatchMon centralizes patch monitoring, patch deployment, compliance and remote access for Linux, FreeBSD and Windows fleets.Read 15 Oct 2026 · patchmon.net
- Purpose
- PatchMon provides a central dashboard for patch monitoring across Linux, FreeBSD, and Windows fleets.Read 4 Oct 2026 · patchmon.net
- Integrations
- Documented integrations include Discord, getHomepage, Ansible and Proxmox LXC auto-enrollment.Read 15 Oct 2026 · patchmon.net
- Compliance
- PatchMon supports OpenSCAP CIS benchmark scans with per-rule results, severity, remediation guidance, and score tracking.Read 4 Oct 2026 · patchmon.net
- Support
- Cloud support channels vary by tier: Starter includes email and Discord, Plus adds Slack, and Max also includes phone support.Read 4 Oct 2026 · patchmon.net
- Headquarters
- London, United KingdomRead 28 Sep 2026 · patchmon.net
- Access control
- The platform includes built-in and custom RBAC, OIDC/SSO, TOTP 2FA, session management and audit logging.Read 15 Oct 2026 · patchmon.net
- Agent security
- Agents connect outbound over WebSocket, use TLS in transit, and do not require root for monitoring operations.Read 4 Oct 2026 · patchmon.net
- Alerting
- Notification destinations include email/SMTP, Slack, Discord, Teams, ntfy and generic webhooks, with routing and delivery history.Read 15 Oct 2026 · patchmon.net
- API capabilities
- The integration API exposes host lists, statistics, system, network, package, report, queue, notes and integration endpoints.Read 15 Oct 2026 · patchmon.net
- Architecture
- The server is a Go binary with embedded React/Vite UI and uses PostgreSQL 17 plus Redis 7 for queued jobs.Read 15 Oct 2026 · github.com
- Audit trail
- Patch runs record who triggered and approved them, timestamps, policy details, affected packages, and command output.Read 4 Oct 2026 · patchmon.net
- Automation extensibility
- Ansible dynamic inventory and Proxmox enrollment are documented, and the API supports custom automation workflows.Read 15 Oct 2026 · patchmon.net
- Certification caveat
- PatchMon Ltd says it is not ISO 27001 certified; ISO 27001 and BSI C5 Type 1 certifications apply to its IONOS hosting provider.Read 15 Oct 2026 · patchmon.net
- Certifications
- PatchMon Ltd says it is not ISO 27001 certified; its hosting provider is certified to ISO/IEC 27001 and BSI C5 Type 1.Read 4 Oct 2026 · patchmon.net
- Cloud regions
- PatchMon Cloud offers regional deployment choices in the UK, Germany, France and the United States.Read 15 Oct 2026 · patchmon.net
- Cloud security
- PatchMon states that Cloud uses TLS in transit, AES-GCM for sensitive fields at rest, customer-scoped keys, and per-tenant isolation.Read 4 Oct 2026 · patchmon.net
- Company founding
- LinkedIn lists PatchMon as founded in 2025.Read 15 Oct 2026 · linkedin.com
- Company size
- LinkedIn lists PatchMon as a privately held software-development company with 2–10 employees.Read 15 Oct 2026 · linkedin.com
- Compliance scanning
- Compliance uses OpenSCAP CIS benchmarks and Docker Bench for Security with per-rule results, scores and remediation guidance.Read 15 Oct 2026 · patchmon.net
- Docker monitoring
- The agent can inventory containers, images, volumes and networks and stream container lifecycle events.Read 15 Oct 2026 · patchmon.net
- Documentation depth
- The documentation set includes a 168-page Admin Guide, 207-page Operator Guide and 128-page API and Integrations Guide.Read 15 Oct 2026 · patchmon.net
- Latest release
- GitHub lists PatchMon v2.1.3, released 15 August 2026, fixing ADFS SSO, Mattermost/Rocket.Chat webhooks, compliance-content delivery and stale suspended laptops.Read 15 Oct 2026 · github.com
- Legal entity
- PatchMon Ltd is an active UK private company incorporated on 26 March 2026 with a registered address at 71–75 Shelton Street, London WC2H 9JQ.Read 15 Oct 2026 · companiesintheuk.co.uk
- Licence
- The Community Edition and repository are licensed under AGPLv3.Read 15 Oct 2026 · github.com
- Limit: distribution coverage
- A Reddit user reported that openSUSE was not supported at the time, although development support was planned.Read 15 Oct 2026 · reddit.com
- Limit: notifications
- A Reddit user reported missing notifications for updates that needed attention.Read 15 Oct 2026 · reddit.com
- Limit: upgrade failure
- The v2.1.1 release notes describe a v2.1.0 migration crash loop affecting installs with certain null alert metadata.Read 15 Oct 2026 · github.com
- Limit: upgrades
- A Reddit user said PatchMon updates had caused reverse-proxy issues, while another criticized fast and furious release cycles.Read 15 Oct 2026 · reddit.com
- Limit: Windows patching
- PatchMon documents Windows Update monitoring today, with Windows patch deployment still on its roadmap.Read 15 Oct 2026 · patchmon.net
- Outbound agents
- Agents initiate outbound WebSocket connections, so monitored hosts need no inbound firewall ports.Read 15 Oct 2026 · patchmon.net
- Package managers
- Supported package systems are APT, DNF/YUM, APK, Pacman, FreeBSD pkg and Windows Update.Read 15 Oct 2026 · patchmon.net
- Patch controls
- Patch policies support immediate, delayed, or fixed-time schedules, dry-run validation, approval workflows, and per-host or host-group assignment.Read 4 Oct 2026 · patchmon.net
- Patch deployment
- Automated patch deployment is available on Linux and FreeBSD, while Windows patch deployment is listed as on the roadmap.Read 4 Oct 2026 · patchmon.net
- Patch orchestration
- Patching supports dry runs, approval workflows, scheduling, selective updates, live logs, stopping and retrying runs.Read 15 Oct 2026 · patchmon.net
- Praise: automated patching
- A Reddit user said automated morning patching after backups kept VMs and LXCs up to date and recommended PatchMon.Read 15 Oct 2026 · reddit.com
- Praise: update visibility
- A Reddit user running about 20 hosts for six months called PatchMon excellent for tracking updates.Read 15 Oct 2026 · reddit.com
- Praise: usability
- A Proxmox Reddit user reported that PatchMon worked well for cluster and standalone nodes and reduced manual checking.Read 15 Oct 2026 · reddit.com
- Public API
- PatchMon publishes versioned REST APIs with an embedded OpenAPI browser and scoped credentials using Basic Authentication.Read 15 Oct 2026 · patchmon.net
- Remote access
- Max provides browser SSH and browser RDP through Apache Guacamole, with optional agent-proxied connections.Read 15 Oct 2026 · patchmon.net
- Security controls
- PatchMon states that traffic uses TLS, agent credentials are hashed, least privilege is used and patch actions are fully audited.Read 15 Oct 2026 · patchmon.net
- Self-hosting
- Self-hosted deployment is offered through Docker Compose, native binaries and a Proxmox LXC script.Read 15 Oct 2026 · github.com
- Server requirements
- The repository lists minimum server requirements of 2 vCPU, 2 GB RAM and 15 GB disk.Read 15 Oct 2026 · github.com
- Trial terms
- Cloud trials last 14 days with the full Plus feature set, require a card at signup, and are not charged if cancelled before the trial ends.Read 4 Oct 2026 · patchmon.net
- Use case
- PatchMon describes its audience as infrastructure teams managing mixed server fleets, from small startups to enterprises with a thousand hosts.Read 4 Oct 2026 · patchmon.net
Plans and prices
Strong points and limits
Strong points
- Supports Linux, FreeBSD, and Windows monitoring.
- Patch policies include scheduling and approval workflows.
- Patch runs retain audit details.
- OpenSCAP scans include remediation guidance.
- Free self-hosted Community Edition is available.
Limits
- Windows patch deployment is on the roadmap.
- Self-hosted users operate the server and backups.
- Cloud trials require a card at signup.
- PatchMon Ltd is not ISO 27001 certified.
Who it suits
PatchMon suits infrastructure teams managing mixed Linux, FreeBSD, and Windows fleets. It may fit teams that need patch scheduling, approval records, and compliance scanning, while accepting self-hosting responsibilities or endpoint-based cloud pricing.
Verdict
PatchMon combines fleet patch monitoring with scheduling, audit records, and compliance scans. Windows deployment is not yet available, and the free edition requires users to manage their own hosting.
Where Specifiction places it
- Patch Management Software#3 of 499.0
- IT Automation Software#8 of 778.9