- Home
- Patch Management Software
- PatchPilot
PatchPilot
What it is
PatchPilot is a self-hosted patch management dashboard for homelabs, covering Linux, macOS, and Windows hosts. It continuously checks which hosts are current, need patches, or cannot be reached. Users can select hosts for patching and watch live output over WebSocket. Supported tools include apt, dnf, yum, brew, macOS softwareupdate, Windows Update, and winget. Maintenance windows can use cron-style schedules and time zones, while encrypted backups support retention policies and full system restore with local or NFS storage. Scheduling, backup, and restore require an active license. PatchPilot describes JWT authentication with admin and viewer roles and Fernet-encrypted SSH key storage. Deployment options include Docker Compose and Kubernetes; the Kubernetes path provides automated TLS through cert-manager and Let’s Encrypt. A native iOS app includes a dashboard, host list, patch operations, live progress, and Keychain storage. A 14-day free trial is available; paid plans start at $5.99/mo. Each license key activates on one installation and can be moved after deactivation. The repository warns that dashboard read endpoints expose fleet inventory without a session and advises adding another authentication layer before internet exposure.
For and against
For
- Monitors host patch status continuously
- Supports patching across Linux, macOS, and Windows
- Cron-style schedules include maintenance windows and time zones
- Encrypted backups support retention and full system restore
Against
- Scheduling, backup, and restore require an active license
- One installation per license key
- Read endpoints expose fleet inventory without a session
- An additional authentication layer is advised before internet exposure
The verdict
PatchPilot provides host monitoring and patching alongside licensed scheduling and backup tools. Review its security warning and one-installation license limit before exposing or deploying the dashboard.
Who it suits
PatchPilot suits homelab operators managing patches across Linux, macOS, and Windows hosts. Its self-hosted setup and deployment options are for users prepared to run the dashboard themselves.
Plans and prices
Monthly
Backup and restore require an active license · One installation per license key
Read 9 Oct 2026 · github.com
Annual
Backup and restore require an active license · One installation per license key
Read 9 Oct 2026 · github.com
On the record
- Backup and restore
- Encrypted backups support retention policies and full system restore, with local or NFS storage; backup and restore require an active license.getpatchpilot.app · read 9 Oct 2026
- Deployment
- PatchPilot can be deployed with Docker Compose or Kubernetes; its Docker Compose setup uses HTTP on port 8080, while the Kubernetes path provides automated TLS through cert-manager and Let’s Encrypt.getpatchpilot.app · read 9 Oct 2026
- Host support
- The repository lists Debian/Ubuntu, RHEL/CentOS, macOS, and Windows host patching through apt, dnf/yum, brew/softwareupdate, and winget/PSWindowsUpdate.github.com · read 9 Oct 2026
- Integrations and components
- The repository identifies Ansible as the remote execution engine and PostgreSQL 15 as persistent storage, alongside Docker Compose and Kubernetes deployment options.github.com · read 9 Oct 2026
- License activation
- The maker’s repository says each license key activates on one installation and can be moved by deactivating it first.github.com · read 9 Oct 2026
- Mobile app
- The repository describes a native iOS app with a dashboard, host list, patch operations, live progress, and Keychain storage.github.com · read 9 Oct 2026
- Monitoring
- The dashboard shows hosts that are up to date, need patches, or are unreachable, with background checks running continuously.getpatchpilot.app · read 9 Oct 2026
- Patching
- Users can patch selected hosts and view real-time output over WebSocket; supported package tools include apt, dnf, yum, brew, macOS softwareupdate, Windows Update, and winget.getpatchpilot.app · read 9 Oct 2026
- Purpose
- PatchPilot is a self-hosted patch management dashboard for Linux, macOS, and Windows hosts, built for homelabs.getpatchpilot.app · read 9 Oct 2026
- Scheduling
- Patch schedules support cron-style maintenance windows and time zones, and scheduling requires an active license.getpatchpilot.app · read 9 Oct 2026
- Security
- The product describes JWT-based authentication with admin and viewer roles, and Fernet-encrypted SSH key storage.getpatchpilot.app · read 9 Oct 2026
- Security limits
- The repository warns that dashboard read endpoints expose fleet inventory without a session and says to put the app behind an additional authentication layer before internet exposure.github.com · read 9 Oct 2026
- Trial
- The maker’s site includes a 14-day free trial; backup, restore, and patch scheduling require an active license.getpatchpilot.app · read 9 Oct 2026