Low Severity
Published: Nov 5, 2026
Find what's vulnerable, fix it safely with automatic rollback, and prove it to an auditor. Self-hosted vulnerability management for Linux, Windows and SBOMs.
<h1 align="center">Nimstead Assure</h1>
<p align="center"><b>Find what's vulnerable. Fix it safely. Prove it to an auditor.</b></p>
<p align="center">
<a href="https://github.com/Nimstead/assure/releases"><img alt="Release" src="https://img.shields.io/github/v/release/Nimstead/assure?include_prereleases&label=early%20access&color=111111"></a>
<a href="https://github.com/Nimstead/assure/actions/workflows/ci.yml"><img alt="CI" src="https://github.com/Nimstead/assure/actions/workflows/ci.yml/badge.svg"></a>
<a href="LICENSE.md"><img alt="Licence: FSL-1.1-ALv2" src="https://img.shields.io/badge/licence-FSL--1.1--ALv2-b0122c"></a>
<img alt="Python 3.14" src="https://img.shields.io/badge/python-3.14-111111">
<img alt="PostgreSQL 17" src="https://img.shields.io/badge/postgresql-17-111111">
</p>
<p align="center"><img src="docs/images/home-1440.png" alt="Fix first: 1,183 open findings across five real Linux machines and an application, two fixes that need a look, and the upgrades that clear the most risk" width="900"></p>
Nimstead Assure scans your Linux and Windows machines and your applications' dependencies for known vulnerabilities, tells you which few upgrades clear the most real risk, can apply them for you with automatic rollback, and keeps a tamper-evident record your auditor can check without asking us.
> [!NOTE]
> **Early access (v0.6).** Everything below works and is proven on real systems, but expect rough edges and breaking changes before 1.0. Until a release is promoted to the stable channel (none has been yet), set `NIMSTEAD_UPDATE_CHANNEL=preview` (or `beta` once one exists) in `.env` so your server hears about updates. Run it on test machines first; automated fixes stay limited to machines you enrol as test machines until you turn them on for production. Tell us what breaks: [open an issue](https://github.com/Nimstead/assure/issues/new/choose) or email [email protected].
## What it does
- **Finds vulnerabilities without the noise.** Agen