Low Severity
Published: Nov 7, 2026
Self-hosted vulnerability monitoring for homelabs and small networks. Scans every Linux host, container image and appliance daily (Grype + OSV), flags what is actively exploited or exposed to the internet, warns early from security news and gives the exact fix command. LAN-only, agents open no ports, dangerous actions need your passkey.
<img src="docs/media/lablantern-icon.svg" alt="" width="72">
# LabLantern
[](https://github.com/noah-ebrt/LabLantern/actions/workflows/ci.yml)
[](LICENSE.md)
**Self-hosted vulnerability monitoring for your homelab or small network.**
```bash
curl -fsSL https://raw.githubusercontent.com/noah-ebrt/LabLantern/main/install.sh | sh
```
LabLantern keeps track of every Linux host, container and appliance in your network, checks them for known security
vulnerabilities every day, and tells you clearly what needs your attention: what is critical, what is merely
outdated, what is reachable from the internet, and which check could not run. It runs entirely on your own hardware
and its web interface is reachable only in your LAN.
**In short:**
- **One overview** of all hosts, containers and devices, with a clear red / yellow / green status.
- **Daily scans** of operating system packages and every running container image.
- **Concrete next steps:** which image or package to update, and the command to do it.
- **No silent gaps:** if a check fails, you see it. LabLantern never reports "all clear" by leaving something out.
- **Secure by design:** agents open no ports, dangerous actions need your passkey, secrets are stored encrypted.
## Features
### Vulnerability scanning
- Scans the packages of each host and every running container image with two independent scanners,
[Grype](https://github.com/anchore/grype) and [OSV-Scanner](https://github.com/google/osv-scanner).
- Rates every finding with fixed, predictable rules. It weighs whether a fix exists, whether the vulnerability is
actively exploited ([CISA KEV](https://www.cisa.gov/known-e