v0.1.0
Patchlight v0.1.0
Self-hosted CVE prioritizer: match CVEs to your real inventory (product+version, raw CPE, or SBOM import — CycloneDX/SPDX) and rank by CISA KEV + EPSS + CVSS. Air-gapped mode via mirrored feeds.
This is the free edition, built from this repository with an empty license issuer key — it has no license activation. Free-tier limits: 25 inventory items. Pro and Team tiers (higher limits, delivered binaries) are available at whop.com/nizar-tuanku/patchlight-cve-prioritizer.
Install
tar -xzf patchlight-free-0.1.0-linux-amd64.tar.gz
./patchlight
Dashboard: http://127.0.0.1:8425 — single binary, SQLite storage in the working directory, no telemetry, nothing leaves your network.
Or build from source (Go 1.24+, CGO required for the SQLite driver):
go build ./cmd/patchlight
Integrity
Verify the download:
sha256sum -c SHA256SUMS
SHA-256: 06a7a63319829574d5dad040d9aed6d6d197b2fb8470a745063d8aeaa0b1f8ed
Feedback
Run it in a lab first. Bug reports and lab feedback via GitHub Issues are very welcome.