About

The free reference for
software end-of-life intelligence.

endoflife.ai tracks when software products reach end of life — the moment vendors stop issuing security patches. We publish EOL dates, support timelines, and EOL Risk Scores™ for 700+ products including every major runtime, framework, OS, database, and cloud platform. Free, always.

700+
Products tracked
15,000+
Score card pages
Daily
Data refresh cadence
2026
Year founded
Our mission
"No engineering team should discover their runtime is EOL from a breach report. We're building the authoritative reference so they find out from us first."

Why we built this

A CVE-based scan tells you about known flaws — it does not tell you that a runtime has passed end of life. When Node.js 18 went end-of-life in April 2025, every new CVE disclosed after that date accumulated with no vendor patch path. Some scanners flag unsupported versions of common products, but coverage varies, and none of them warn you in advance. Teams stayed exposed.

That's the CVE blind spot. With a zero-day, nobody knows the vulnerability exists. With EOL software, the vulnerability is public — listed on NVD, rated by CVSS, often with exploit code on GitHub — but no vendor patch is coming. A scan can still come back clean. Attackers know exactly what's there.

endoflife.ai was built to close that gap. We track every major product's lifecycle, quantify the risk with our proprietary EOL Risk Score™, and make the data freely available to every developer, security team, and platform that needs it.

Scott Bissett
Founder · endoflife.ai

Builder, entrepreneur, and infrastructure obsessive based in Calgary, Alberta, Canada. Built endoflife.ai to give security and engineering teams the one reference they need for software lifecycle intelligence — free, comprehensive, and rebuilt every day.

LinkedIn → Email →

EOL Risk Score™ Methodology

Every product and version carries a 0–100 EOL Risk Score™ — our proprietary measure of the actual security and operational risk of running that version in production. Four factors drive the score.

40pts
EOL Recency
How long since the version lost official support. A version EOL'd three years ago scores higher than one that went EOL last month.
30pts
Attack Surface
How broadly the product is deployed and how many attack vectors it exposes. Runtimes processing HTTP traffic score higher than niche utilities.
20pts
CISA KEV Exposure
Whether known exploited vulnerabilities exist for this product in the CISA Known Exploited Vulnerabilities catalog.
10pts
Extended Support
Whether commercial extended support options exist for this product, slightly reducing urgency for teams that can't migrate immediately.

Full methodology documentation at endoflife.ai/risk-score

Data sources

Every lifecycle date we publish carries its provenance. For the commercial tier we read the vendor's own lifecycle page or API directly, twice a day, and reconcile it against endoflife.date, the open source project (MIT License) that we also contribute to; where the two disagree we investigate and publish the correction with its source. Products without a vendor feed are served from endoflife.date and labelled as such. The live breakdown, every open disagreement and every published correction are on our accuracy page. We are grateful to the endoflife.date maintainers for their work. The two are separate projects; how they relate is set out on its own page, and What is endoflife.ai? gives the short description.

EOL Risk Scores™ are calculated by endoflife.ai using our proprietary methodology. CISA KEV exposure data is sourced from the CISA Known Exploited Vulnerabilities Catalog, a public domain US government dataset.

All data is refreshed at every build deployment. Score cards and product pages are regenerated automatically to reflect the latest lifecycle data.

Partners & Integrations

We work with extended support vendors, security platforms, and observability tools to bring EOL intelligence to the tools engineering and security teams already use.

HeroDevs — Extended Support (Never-Ending Support)Signed referral partner
Dynatrace — Observability IntegrationSigned partner; integration guide live
Datadog — Observability IntegrationListed in the Datadog Integrations catalog
Red Hat — Lifecycle Intelligence (API and MCP server)Available in the Red Hat® Ecosystem Catalog
Tenable — MCP serverListed on the Tenable CyberAgents Exchange
AWS Marketplace — MCP serverAvailable in AWS Marketplace
Grafana — EOL & Risk Overview dashboardCommunity dashboard on grafana.com
Grafana — EOL data source: end-of-life dates and EOL Risk ScoresAvailable in the Grafana Marketplace
Zabbix — EOL by HTTP templateIn the Zabbix community-templates repository
Splunk — endoflife.ai EOL Risk appApp on Splunkbase
Cribl — EOL Enrichment pack for Cribl StreamOn the Cribl Marketplace
HaloPSA — EOL fields on every assetOn the Halo integrations page

We list only signed partnerships and integrations that are genuinely in flight — the same standard as our partners page. Nothing here is aspirational.

Contact

Partnerships & API
[email protected]
Location
Taber, Alberta, Canada
Founded
2026
API
endoflife.ai/api
Publisher
EndofLife AI Inc. · Box 4024 Station Main, Taber, Alberta T1G 2C6, Canada
Editor: Scott Bissett · [email protected]