PatchPulse

PatchPulse is a web app (with optional CLI agent) that continuously detects and prioritizes “patch drift” across fleets: OS packages, container base images, language runtimes, and critical libraries. Instead of dumping CVE lists, it maps drift to real blast radius: which services, clusters, and customer-facing paths are exposed, and which deployments are blocked by brittle upgrade steps. It generates safe, reviewable pull requests for base image bumps, Helm chart updates, and dependency upgrades, plus a rollout plan aligned to your maintenance windows and SLO risk. It also tracks patch SLAs per team and produces audit-ready evidence for SOC2/ISO (what changed, when, who approved, and what was verified). This is a combination traditional + AI app: traditional for inventory, policy, and enforcement; AI for change summarization, PR descriptions, and upgrade playbooks.