Add an inventory option that allows for export via CSV.

Retrieve more detailed information about a host—such as CPU, RAM (in gigabytes), architecture, and operating system—to populate the inventory section.

Expose compliance summary on the Integration API (hosts include=stats and integrations)

Originally raised by @mrjoshuap on GitHub: https://github.com/PatchMon/PatchMon/issues/1189 ## Summary The scoped Integration API (Basic Auth with host:get) already returns rich host data through GET /api/v1/api/hosts?include=stats: reboot state, update counts, security updates, OS and reporting state. Compliance data is only available under /api/v1/compliance/*, which needs a browser session with compliance permissions. That means ...

Add "apt autoremove" option

Sometimes wy try update system with small /boot partition. Old school with small separate /boot. Kernel update can not fit to this partition. So, we need login to machine and make "apt autoremove" to clean unneeded packages and free up /boot partition.

Automatic patching with patch severity filters

It would also be great, if a patch policy would be able to filter for specific patch severity levels. In general I would like to e.g. apply security patches automatically immedeatly while regular updates/bugfixes can go in weekly after review. I think this is a fairly common use-case. And while the later can be done with the current patching mechanic, the automatic security only patching would be a big plus.

[Feature]: Update all, and reboot options

What is the installation method of your PatchMon server? _No response_ ### What is the version of your PatchMon server? v2.0.2 ### Briefly describe the feature Add support for Update all and reboot manually and automatically ### Detailed description This is a cool project, but I am missing important features to update all devices and then reboot. ### Why is this useful? Right now I only use Patchmon to see pending updates. Then I use ansible to carry out these updates and reboot...

Windows package listing - need more details

(From Discord message, pasted here) I'm back with a Windows question (always, Linux just work flawesly, even docker images did warn me now) I don't know what to do about this report. If I go to one of the server, that all the "Edge" output (that would be nice to have the ability to see the current active/installed version too there) ----- As I was looking at those Edge installs, filtering in the host package page the word "Edge", it shows 3 of them, but we definitively lack of ...

It would be nice to exclude specific packages by name. For example "wazuh-agent"

[Feature]: Patch multiple hosts at once

What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.0 ### Briefly describe the feature Patch multiple hosts at once ### Detailed description Love the new patching feature in 2.0.0, it's been working great so far! Unfortunately, unless I'm missing something, it seems like you need to manually patch individual hosts. It would be great to be able to select a group, or even use the checkboxes to select...

Add option to pin packages with "apt-mark hold"

Sometimes I am struggling with some packages having unexpected side effects after an update. Example: Docker changed it's minimum API version after updating to version 29. It would be very nice, if I could pin package versions (with apt-mark) on my machines, until I am ready to update.

Native HTTPS Support / SSL for the PatchMon web server

In our case, PatchMon communicates with Nginx Proxy Manager over an unencrypted HTTP connection (default port 3000). While HTTPS is available for external client access via Nginx Proxy Manager, the backend connection between Nginx Proxy Manager and PatchMon remains unencrypted. For corporate environments with strict security or compliance requirements, all internal traffic must also be encrypted. This currently prevents us from deploying PatchMon. It would be very helpful if PatchMon suppor...

Fallback from winget to pinget

Winget is a tool for Updates on Windows 11 / Server 2025. For older Releases (Win10 / Server 2022/2019), winget is not officially available. Anyway, the devolutions people published a tool called "pinget", which does the same. ++https://github.com/Devolutions/pinget++ Would it be possible to integrate this for "older" Windows Server versions?

[Feature]: Implement Recurring Patching Policies (Weekly, Monthly, Quarterly) with Pre-Patch Alerts

What is the installation method of your PatchMon server? Proxmox-community script ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Add support for scheduled patching policies with weekly/monthly/quarterly recurrences and pre-patch email notifications. ### Detailed description Currently, PatchMon supports scheduled patching where an admin can approve a patch run and schedule it for a specific future maintenance window. However, this still requi...

Docker Vulnerabilities

On my local i modified the docker menù to add scan vulnerabilities with trivy. what do you think ?

Debian: track newer kernels from backports

On Debian hosts using backports, a newer backports kernel only appears as an update when the backports kernel metapackage is installed, because PatchMon reports what apt itself offers. Request: optionally detect and report newer kernel series available from backports (new ABI package names), so admins can see when a backports kernel upgrade is available. Originally raised on GitHub as #766.

Windows agent: report outdated Chocolatey packages

The Windows agent currently finds outdated software through WinGet and Windows Update. Software installed with Chocolatey isn't checked against Chocolatey's own feed, so Chocolatey-managed apps can be missed or reported inaccurately. Request: when Chocolatey is installed, also collect choco outdated results so Chocolatey-managed packages show their available updates. Originally raised on GitHub as #839.

Feature Request: Show CVE and CVSS for Security Updates

Currently, PatchMon shows when a package has a Security Update Available, but it would be very useful to also show the CVE and CVSS severity associated with that update. For example: PackageCVECVSSSeverityopensslCVE-2026-XXXX9.8CriticalopensshCVE-2026-YYYY7.5High Suggested features - Show the CVE ID associated with a security update. - Show the CVSS score and severity (Critical/High/Medium/Low). - Show the highest CVSS score when an update fixes multiple CVEs. - Allow ...

Feature request: Add a force mode to handle APT locks during patching

First of all, thank you for the new patching functionality. I've been using Patchmon primarily for monitoring, and being able to apply updates directly from Patchmon is a really useful addition. However, I've encountered a recurring issue with APT locks during patch runs. For example: $ apt-get update -qq E: Could not get lock /var/lib/apt/lists/lock. It is held by process 2152163 (apt-get) E: Impossible de verrouiller le répertoire /var/lib/apt/lists/ `[apt-get update error...

Stagger "Patch All" so hosts aren't patched at once

"Patch All" (and multi-host patching) starts the run on every selected host at the same moment. On shared infrastructure, such as Proxmox nodes with many containers, that means every guest hits the package mirrors, CPU and disk together. Request: an option to stagger multi-host patch runs, for example a maximum number of hosts patching at once or a delay between hosts, so large fleets can be patched without overloading the underlying hosts. Originally raised on GitHub as [#1080](https:/...

[Feature]: Pre and post actions for patching

What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Execute script or command before or after patching host ### Detailed description Extend patching policies with actions feature and fields for "script to run before/after patching" with optional and or default settings for "timeout in seconds", "command modes" like must succeed, ignore failures, run asynchronously - ignore failures....

[Feature]: Patching policy

What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.0 ### Briefly describe the feature Policy schedule ### Detailed description Allow to plan host patching by schedule like daily, weekly, monthly or crontab values. Not all hosts must be patched daily in production. ### Why is this useful? This will reduce the change management and risk of hosts running in production.