PatchMon

Free plan Open source APILinuxSelf-hostedWebWindows

What PatchMon is

PatchMon provides a central dashboard for monitoring patches across Linux, FreeBSD, and Windows server fleets. Patch policies can run immediately, after a delay, or at a fixed time, with dry-run validation, approval workflows, and assignment to hosts or host groups. Automated deployment is available on Linux and FreeBSD; Windows deployment is listed as being on the roadmap. Patch runs keep records of who triggered and approved them, timestamps, policy details, affected packages, and command output. OpenSCAP CIS benchmark scans show results by rule, severity, remediation guidance, and score tracking. Listed integrations include Proxmox LXC, Ansible, Docker, REST API, SSH, Windows RDP, messaging tools, and AI services. Agents connect outbound over WebSocket, use TLS in transit, and do not need root for monitoring. The free Community Edition is self-hosted under AGPLv3, with server operation, updates, backups, and uptime managed by the user. Cloud plans start at $1 per endpoint per month. A 14-day cloud trial offers Plus features, requires a card at signup, and is not charged if cancelled before it ends.

Who it suits

PatchMon suits infrastructure teams managing mixed server fleets, from small startups to enterprises with a thousand hosts. It offers a self-hosted option as well as cloud plans.

What it does well

Policies support schedules, dry runs, approvals, and host assignment.
Patch runs record actors, packages, timestamps, and command output.
OpenSCAP scans include severity and remediation guidance.
Monitoring agents do not require root access.

What to know first

Windows patch deployment is still on the roadmap.
Community Edition users operate the server and manage updates.
Cloud trials require a card at signup.

Limits

Community Edition requires users to operate the server and manage updates, backups, and uptime. Cloud trials last 14 days, require a card at signup, and include the Plus feature set; cancellation before the trial ends avoids a charge. Automated patch deployment for Windows is on the roadmap.

Plans

Plan	Billed and limits	Price
Community Edition	forever · AGPLv3 self-hosted · patch monitoring and deployment · compliance scanning · remote access · Docker monitoring · alerting · RBAC · reporting	Free
Starter	per host/month; annual billing is 10 months’ price · Monitoring only · up to 3 users · Linux, FreeBSD, Windows · REST API · OIDC/SSO · 2FA · email and Discord support	$1 a month
Plus	per host/month; annual billing is 10 months’ price · Everything in Starter · patch runs · scheduling and approvals · Docker monitoring · advanced alerts · custom RBAC · unlimited users	$2 a month
Max	per host/month; annual billing is 10 months’ price · Everything in Plus · browser SSH · browser RDP · BYO-AI assistant · OpenSCAP/CIS/Docker Bench compliance · phone support	$3 a month
PRO	Professional services, vendor support, training and deployment help for self-hosted or large-scale users	On request

As patchmon.net lists them, read 15 Oct 2026. The maker's own page has the final word.

Getting started

Choose the self-hosted Community Edition or a Cloud plan.
For a Cloud trial, sign up with a card to start 14 days with Plus features.
For Community Edition, prepare to operate the server and handle updates, backups, and uptime.
Connect your Linux, FreeBSD, or Windows fleet to the dashboard.
Set patch policies and assign them to hosts or host groups.

Verdict

PatchMon combines patch controls and audit records with compliance scanning for mixed server fleets. Check the deployment model and platform limits that fit your environment before choosing a plan.

Questions

Is PatchMon free?

Yes. Community Edition is free forever under AGPLv3 and is self-hosted.

How much do Cloud plans cost?

Starter is $1 per endpoint per month, Plus is $2 per endpoint per month, and Max is $3 per endpoint per month. Annual billing is 10 months of the monthly rate.

Is there a free trial?

Cloud plans offer a 14-day trial with the full Plus feature set. Signup requires a card, and cancellation before the trial ends avoids a charge.

Which operating systems does PatchMon support?

PatchMon supports Linux, FreeBSD, and Windows. Automated patch deployment is available on Linux and FreeBSD; Windows deployment is on the roadmap.

Is PatchMon open source?

The Community Edition is available under the AGPLv3 license.

Does PatchMon have ISO 27001 certification?

PatchMon Ltd says it is not ISO 27001 certified. Its hosting provider is certified to ISO/IEC 27001 and BSI C5 Type 1.

Facts from PatchMon's own pages

Access control: The platform includes built-in and custom RBAC, OIDC/SSO, TOTP 2FA, session management and audit logging. · patchmon.net, 15 Oct 2026
Agent security: Agents connect outbound over WebSocket, use TLS in transit, and do not require root for monitoring operations. · patchmon.net, 4 Oct 2026
Alerting: Notification destinations include email/SMTP, Slack, Discord, Teams, ntfy and generic webhooks, with routing and delivery history. · patchmon.net, 15 Oct 2026
API capabilities: The integration API exposes host lists, statistics, system, network, package, report, queue, notes and integration endpoints. · patchmon.net, 15 Oct 2026
Architecture: The server is a Go binary with embedded React/Vite UI and uses PostgreSQL 17 plus Redis 7 for queued jobs. · github.com, 15 Oct 2026
Audit trail: Patch runs record who triggered and approved them, timestamps, policy details, affected packages, and command output. · patchmon.net, 4 Oct 2026
Automation extensibility: Ansible dynamic inventory and Proxmox enrollment are documented, and the API supports custom automation workflows. · patchmon.net, 15 Oct 2026
Certification caveat: PatchMon Ltd says it is not ISO 27001 certified; ISO 27001 and BSI C5 Type 1 certifications apply to its IONOS hosting provider. · patchmon.net, 15 Oct 2026
Certifications: PatchMon Ltd says it is not ISO 27001 certified; its hosting provider is certified to ISO/IEC 27001 and BSI C5 Type 1. · patchmon.net, 4 Oct 2026
Cloud regions: PatchMon Cloud offers regional deployment choices in the UK, Germany, France and the United States. · patchmon.net, 15 Oct 2026
Cloud security: PatchMon states that Cloud uses TLS in transit, AES-GCM for sensitive fields at rest, customer-scoped keys, and per-tenant isolation. · patchmon.net, 4 Oct 2026
Company founding: LinkedIn lists PatchMon as founded in 2025. · linkedin.com, 15 Oct 2026
Company size: LinkedIn lists PatchMon as a privately held software-development company with 2–10 employees. · linkedin.com, 15 Oct 2026
Compliance: PatchMon supports OpenSCAP CIS benchmark scans with per-rule results, severity, remediation guidance, and score tracking. · patchmon.net, 4 Oct 2026
Compliance scanning: Compliance uses OpenSCAP CIS benchmarks and Docker Bench for Security with per-rule results, scores and remediation guidance. · patchmon.net, 15 Oct 2026
Docker monitoring: The agent can inventory containers, images, volumes and networks and stream container lifecycle events. · patchmon.net, 15 Oct 2026
Documentation depth: The documentation set includes a 168-page Admin Guide, 207-page Operator Guide and 128-page API and Integrations Guide. · patchmon.net, 15 Oct 2026
Headquarters: London, United Kingdom · patchmon.net, 28 Sept 2026
Integrations: Documented integrations include Discord, getHomepage, Ansible and Proxmox LXC auto-enrollment. · patchmon.net, 15 Oct 2026
Latest release: GitHub lists PatchMon v2.1.3, released 15 August 2026, fixing ADFS SSO, Mattermost/Rocket.Chat webhooks, compliance-content delivery and stale suspended laptops. · github.com, 15 Oct 2026
Legal entity: PatchMon Ltd is an active UK private company incorporated on 26 March 2026 with a registered address at 71–75 Shelton Street, London WC2H 9JQ. · companiesintheuk.co.uk, 15 Oct 2026
Licence: The Community Edition and repository are licensed under AGPLv3. · github.com, 15 Oct 2026
Limit: distribution coverage: A Reddit user reported that openSUSE was not supported at the time, although development support was planned. · reddit.com, 15 Oct 2026
Limit: notifications: A Reddit user reported missing notifications for updates that needed attention. · reddit.com, 15 Oct 2026

Where PatchMon stands on Freedom251

Patch Management Software#2 of 49
IT Automation Software#4 of 77