The free edition now holds 150 inventory items, up from 25 — a cap inherited from an earlier product and well below the size of the estate most people want to point Patchlight at first. Pro stays at 500, Team stays unlimited.
The edition table in the README had drifted from the code in three other rows, and the code was right every time: the free scan interval is every 12 hours and fixed, free alert channels are webhook and syslog, and the offline / air-gapped mirror flags were never gated by tier at all. The table now says what the binary does.
Verification identifiers are now Hexward's own — X-Hexward-Token, _hexward-verify.<domain> and /.well-known/hexward-verify.txt. Nothing already installed breaks: verification accepts either the old or the new name, and the webhook sends both headers, so a receiver written against the old one keeps working with no change at either end. The old names are removed on 1 March 2027.
The licence panel, the footer, and the message you get when a free-edition limit is reached now all point at the product page, and docs/CONCEPTS.md explains what Patchlight is reasoning about — CPE, KEV, EPSS, and why a target that returns no findings is the first thing to check rather than the last.
Verify the download before you run it:
sha256sum -c SHA256SUMS
tar xzf patchlight-free-0.1.2-linux-amd64.tar.gz
./patchlight
Pro ($29/mo) and Team ($99/mo), each with a 14-day free trial: whop.com/nizar-tuanku/patchlight-cve-prioritizer
Free: github.com/nizartuanku/patchlight — this repository is the free edition, Apache-2.0, no time limit.