# PatchMon

> AGPL-3.0 self-hosted patch management for Linux fleets, with outbound-only agents and dry-run approvals

**Category:** DevOps  
**Pricing:** open-source  
**URL:** https://patchmon.net  
**GitHub:** https://github.com/PatchMon/PatchMon  
**Added:** 2026-10-21

---

## The Hook

PatchMon shows which packages are outdated across your servers and lets you patch them from one web UI: a dry run first, then approve, run now or schedule for a maintenance window.

## What's Good

AGPL-3.0 (PatchMon/PatchMon), release v2.1.6 (2026-10-17), commit on 2026-10-18. ★~3.4k since September 2025 (~60 a week). Agents connect outbound only, so monitored hosts need no open ports or SSH. Supports apt, dnf, yum, apk and pacman, plus FreeBSD and Windows agents. Ships as one Go binary with the UI embedded; Docker Compose to start.

## The Catch

A young project (about a year old), and most commits come from one contributor. The server can push package upgrades to every enrolled host, so lock it down like any fleet-control tool. AGPL-3.0 means that if you modify it and offer it as a service, you must publish your changes. A paid managed cloud exists; self-hosting is free.

## Verdict

A focused, free way to see and apply patches across a small-to-mid Linux fleet.