$ npx patcha scan
Scanning dependencies...
Analyzing 287 packages across 3 lockfiles
CRITICAL express@4.17.1 - Open Redirect (CVE-2024-29041)
HIGH lodash@4.17.20 - Prototype Pollution (CVE-2021-23337)
MEDIUM node-fetch@2.6.1 - Info Exposure (CVE-2022-0235)
Found 3 vulnerabilities (1 critical, 1 high, 1 medium)
$ npx patcha fix --auto
Applying fixes...
Created merge request #142 with 3 dependency updates
Everything you need for dependency security
From individual developers to enterprise security teams, Patcha scales with your needs.
CLI Dependency Scanning
Open-source CLI that scans Node.js projects for vulnerabilities directly from your terminal. Integrate into any workflow.
AI-Powered Fix Suggestions
Automated fix suggestions leveraging AI for complex dependency updates. One command to patch your vulnerabilities.
Version Control Integration
Automatic merge request creation with suggested fixes. Seamless GitHub, GitLab, and Bitbucket integration.
Enterprise Dashboard
Centralized platform for full visibility into project vulnerabilities across your entire organization.
Compliance Reporting
Pre-built reports for SOC2, ISO 27001, PCI-DSS, and GDPR. Stay audit-ready at all times.
Real-time Monitoring
Continuous monitoring with instant alerts when new vulnerabilities are disclosed in your dependency tree.
Simple, transparent pricing
Start free with the CLI. Upgrade when your team needs centralized visibility and compliance.