About

The free reference for
software end-of-life intelligence.

endoflife.ai tracks when software products reach end of life — the moment vendors stop issuing security patches. We publish EOL dates, support timelines, and EOL Risk Scores™ for 500+ products including every major runtime, framework, OS, database, and cloud platform. Free, always.

500+
Products tracked
8,000+
Score card pages
Daily
Data refresh cadence
2026
Year founded
Our mission
"No engineering team should discover their runtime is EOL from a breach report. We're building the authoritative reference so they find out from us first."

Why we built this

A CVE-based scan tells you about known flaws — it does not tell you that a runtime has passed end of life. When Node.js 18 went end-of-life in April 2025, every new CVE disclosed after that date accumulated with no vendor patch path. Some scanners flag unsupported versions of common products, but coverage varies, and none of them warn you in advance. Teams stayed exposed.

That's the CVE blind spot. With a zero-day, nobody knows the vulnerability exists. With EOL software, the vulnerability is public — listed on NVD, rated by CVSS, often with exploit code on GitHub — but no vendor patch is coming. A scan can still come back clean. Attackers know exactly what's there.

endoflife.ai was built to close that gap. We track every major product's lifecycle, quantify the risk with our proprietary EOL Risk Score™, and make the data freely available to every developer, security team, and platform that needs it.

Scott Bissett
Founder · endoflife.ai

Builder, entrepreneur, and infrastructure obsessive based in Calgary, Alberta, Canada. Built endoflife.ai to give security and engineering teams the one reference they need for software lifecycle intelligence — free, comprehensive, and always current.

LinkedIn → DEV.to → Email →

EOL Risk Score™ Methodology

Every product and version carries a 0–100 EOL Risk Score™ — our proprietary measure of the actual security and operational risk of running that version in production. Four factors drive the score.

40pts
EOL Recency
How long since the version lost official support. A version EOL'd three years ago scores higher than one that went EOL last month.
30pts
Attack Surface
How broadly the product is deployed and how many attack vectors it exposes. Runtimes processing HTTP traffic score higher than niche utilities.
20pts
CISA KEV Exposure
Whether known exploited vulnerabilities exist for this product in the CISA Known Exploited Vulnerabilities catalog.
10pts
Extended Support
Whether commercial extended support options exist for this product, slightly reducing urgency for teams that can't migrate immediately.

Full methodology documentation at endoflife.ai/risk-score

Data sources

Every lifecycle date we publish carries its provenance. For the commercial tier we read the vendor's own lifecycle page or API directly, twice a day, and reconcile it against endoflife.date, the open source project (MIT License) that we also contribute to; where the two disagree we investigate and publish the correction with its source. Products without a vendor feed are served from endoflife.date and labelled as such. The live breakdown, every open disagreement and every published correction are on our accuracy page. We are grateful to the endoflife.date maintainers for their work. The two are separate projects; how they relate is set out on its own page, and What is endoflife.ai? gives the short description.

EOL Risk Scores™ are calculated by endoflife.ai using our proprietary methodology. CISA KEV exposure data is sourced from the CISA Known Exploited Vulnerabilities Catalog, a public domain US government dataset.

All data is refreshed at every build deployment. Score cards and product pages are regenerated automatically to reflect the latest lifecycle data.

Partners & Integrations

We work with extended support vendors, security platforms, and observability tools to bring EOL intelligence to the tools engineering and security teams already use.

HeroDevs — Extended Support (Never-Ending Support)Signed referral partner
Datadog — Observability IntegrationIn marketplace review

We list only signed partnerships and integrations that are genuinely in flight — the same standard as our partners page. Nothing here is aspirational.

Contact

Partnerships & API
[email protected]
Location
Calgary, Alberta, Canada
Founded
2026
API
endoflife.ai/api
Publisher
EndofLife AI Inc. · Calgary, Alberta, Canada
Editor: Scott Bissett · [email protected]