- Home
- IT Automation Software
- PatchMon
PatchMon
London, United Kingdom
What it is
PatchMon provides a central dashboard for patch monitoring across Linux, FreeBSD, and Windows server fleets. Policies can schedule immediate, delayed, or fixed-time runs, validate changes with dry runs, require approvals, and target hosts or host groups. Automated deployment is available on Linux and FreeBSD; Windows deployment is listed for the roadmap. Patch records include the people who triggered and approved a run, timestamps, policy details, affected packages, and command output. OpenSCAP CIS benchmark scans provide rule-level results, severity, remediation guidance, and score tracking. Integrations include Proxmox LXC, Ansible, Docker, REST API, OpenSCAP, SSH, Windows RDP, messaging services, and AI services. Agents connect outbound over WebSocket, use TLS in transit, and do not need root for monitoring. The free Community Edition is self-hosted under AGPLv3. Cloud plans start at $1/mo per endpoint, with a 14-day Plus-feature trial requiring a card.
For and against
For
- Central fleet patch dashboard
- Flexible schedules and approval workflows
- OpenSCAP compliance scans
- Outbound TLS agent connections
- Free self-hosted Community Edition
Against
- Windows patch deployment is roadmap-only
- Self-hosted edition requires server operations
- Cloud trial requires a card
- PatchMon is not ISO 27001 certified
The verdict
PatchMon brings patch scheduling, approvals, audit records, compliance scans, and integrations together for mixed server environments. Its free self-hosted edition and low per-endpoint cloud entry point are balanced by operational duties and the roadmap status of Windows deployment.
Who it suits
It suits infrastructure teams managing mixed Linux, FreeBSD, and Windows fleets, from small startups to enterprises with many hosts. Self-hosting or cloud plans provide different operating responsibilities and support options.
Plans and prices
Community Edition
AGPLv3 self-hosted · patch monitoring and deployment · compliance scanning · remote access
Read 15 Oct 2026 · patchmon.net
Starter
Monitoring only · up to 3 users · Linux, FreeBSD, Windows · REST API
Read 15 Oct 2026 · patchmon.net
Plus
Everything in Starter · patch runs · scheduling and approvals · Docker monitoring
Read 15 Oct 2026 · patchmon.net
Max
Everything in Plus · browser SSH · browser RDP · BYO-AI assistant
Read 15 Oct 2026 · patchmon.net
PRO
Professional services, vendor support, training and deployment help for self-hosted or large-scale users
Read 15 Oct 2026 · patchmon.net
On the record
- Access control
- The platform includes built-in and custom RBAC, OIDC/SSO, TOTP 2FA, session management and audit logging.patchmon.net · read 15 Oct 2026
- Agent security
- Agents connect outbound over WebSocket, use TLS in transit, and do not require root for monitoring operations.patchmon.net · read 4 Oct 2026
- Alerting
- Notification destinations include email/SMTP, Slack, Discord, Teams, ntfy and generic webhooks, with routing and delivery history.patchmon.net · read 15 Oct 2026
- API capabilities
- The integration API exposes host lists, statistics, system, network, package, report, queue, notes and integration endpoints.patchmon.net · read 15 Oct 2026
- Architecture
- The server is a Go binary with embedded React/Vite UI and uses PostgreSQL 17 plus Redis 7 for queued jobs.github.com · read 15 Oct 2026
- Audit trail
- Patch runs record who triggered and approved them, timestamps, policy details, affected packages, and command output.patchmon.net · read 4 Oct 2026
- Automation extensibility
- Ansible dynamic inventory and Proxmox enrollment are documented, and the API supports custom automation workflows.patchmon.net · read 15 Oct 2026
- Certification caveat
- PatchMon Ltd says it is not ISO 27001 certified; ISO 27001 and BSI C5 Type 1 certifications apply to its IONOS hosting provider.patchmon.net · read 15 Oct 2026
- Certifications
- PatchMon Ltd says it is not ISO 27001 certified; its hosting provider is certified to ISO/IEC 27001 and BSI C5 Type 1.patchmon.net · read 4 Oct 2026
- Cloud regions
- PatchMon Cloud offers regional deployment choices in the UK, Germany, France and the United States.patchmon.net · read 15 Oct 2026
- Cloud security
- PatchMon states that Cloud uses TLS in transit, AES-GCM for sensitive fields at rest, customer-scoped keys, and per-tenant isolation.patchmon.net · read 4 Oct 2026
- Company founding
- LinkedIn lists PatchMon as founded in 2025.linkedin.com · read 15 Oct 2026
- Company size
- LinkedIn lists PatchMon as a privately held software-development company with 2–10 employees.linkedin.com · read 15 Oct 2026
- Compliance
- PatchMon supports OpenSCAP CIS benchmark scans with per-rule results, severity, remediation guidance, and score tracking.patchmon.net · read 4 Oct 2026
- Compliance scanning
- Compliance uses OpenSCAP CIS benchmarks and Docker Bench for Security with per-rule results, scores and remediation guidance.patchmon.net · read 15 Oct 2026
- Docker monitoring
- The agent can inventory containers, images, volumes and networks and stream container lifecycle events.patchmon.net · read 15 Oct 2026
- Documentation depth
- The documentation set includes a 168-page Admin Guide, 207-page Operator Guide and 128-page API and Integrations Guide.patchmon.net · read 15 Oct 2026
- Integrations
- Documented integrations include Discord, getHomepage, Ansible and Proxmox LXC auto-enrollment.patchmon.net · read 15 Oct 2026
