We check the dates. Here's the proof.

EOL dates drift: vendors revise them after release, projections harden into “facts,” and errors propagate across every site that republishes them — ours included. So we cross-check our highest-impact products against each vendor's official lifecycle documentation, publish corrections the moment a vendor's page says otherwise, and label honestly when a vendor publishes no dates at all. This page is regenerated from our verification records at every build.

Machine-readable version: /verification.json

Scoreboard

The numbers this dataset competes on, recomputed from the build inputs at every build. None of them is typed by hand: the vendor-sourced shares come from the provenance class of every served date, the identifier counts from the published CPE and package-URL maps, the citation share from Microsoft's own Bing AI export of Copilot citations per page.

Identifier dispositions: 139 products are recorded as having no CPE in the NIST dictionary (each with the reason) and 0 are still undisposed; 293 are recorded as having no package URL and 0 are still undisposed. Citation source: Microsoft Bing Webmaster AI page statistics exported 2026-09-22 (415 pages; 94 of them are product pages, carrying 3194 citations). Last vendor drift caught: 2026-10-15.

Where every date comes from

Every lifecycle date we serve carries a label at build time: vendor-override (set from the vendor's own publication, source recorded), vendor-fetched (our adapter read the vendor's lifecycle page and it agrees), vendor-verified (a human cross-check covers that version), custom (our own catalog, curated from the vendor), or upstream (endoflife.date only). The commercial tier — the 319 products with a paid-support market — is the number we hold ourselves to. Feeds are re-read twice a day; a disagreement is published here until it is resolved at the vendor.

Confidence: a date is high confidence when two or more independent source classes agree with it — the vendor's own feed, a human decision (a published correction or verification record), the upstream dataset; medium when one source carries it; low when the vendor feed disagrees or has not been read for two weeks. The API returns the grade and the agreement count on every score (eol_date_confidence, eol_date_agreement).

The commercial tier (published so the number above can be checked): Adobe Acrobat · Adobe Experience Manager · AlmaLinux · Amazon Corretto · Amazon EKS · Amazon Linux · Angular · AngularJS · Ansible · Apache ActiveMQ · Apache ActiveMQ Artemis · Apache Cassandra · Apache Commons · Apache CXF · Apache HTTP Server · Apache Kafka · Apache Lucene · Apache Struts · Apache Tapestry · Arista EOS · Artifactory · Atlassian Data Center · Axios · Azul Zulu · Azure DevOps Server · Bamboo · Barracuda CloudGen Firewall · Barracuda Web Application Firewall · BellSoft Liberica · BIG-IP · Bitbucket · Bootstrap · CDH (Cloudera Distribution of Hadoop) · CentOS · Check Point security gateway appliances (hardware) · Check Point Gaia · Cisco AnyConnect · Cisco ASA · Cisco ASA 5500-X Series (hardware) · Cisco Secure Firewall Management Center · Cisco Secure Firewall Threat Defense (FTD) · Cisco IOS · Cisco IOS XE · Cisco IOS XR · Cisco Identity Services Engine · Cisco Meraki · Cisco NX-OS · Cisco Small Business RV Series Routers (hardware) · Cisco Catalyst SD-WAN · Cisco Secure Email Gateway · Cisco Unified Communications Manager · XenServer (Citrix Hypervisor) · Citrix Virtual Apps and Desktops · Citrix Workspace app · Cloudera Base on Premises · Cloudera Data Flow for Cloud · Cloudera Data Services on Premises · Cloudera on Cloud · Cloudera Platform (CDP) · CloudLinux OS · CockroachDB · Adobe ColdFusion · Commvault · Confluence · Confluent Platform · Consul · Control-M · Cortex XDR · Couchbase Server · Debian · Apache Derby · Django · Dojo Toolkit · dom4j · .NET · .NET Framework · Drupal · Eclipse Jetty · Eclipse Temurin · Elasticsearch · elliptic · Ember.js · ESLint · VMware ESXi · Express · FileMaker · FortiADC · FortiAnalyzer · FortiAuthenticator · FortiClient EMS · FortiMail · FortiManager · FortiNAC · FortiNAC-F · FortiOS · FortiProxy · FortiSandbox · FortiWeb · GitLab · Grails · GraphQL Java · Google Guava · H2 Database · HAProxy · HashiCorp Vault · Hazelcast Platform · Hortonworks Data Platform (HDP) · Hibernate ORM · Horizon · HSQLDB · IBM AIX · IBM Db2 · IBM i · IBM MQ · IBM Netezza · IBM Semeru Runtime · IBM WebSphere Application Server · Ingress NGINX · Ionic · Ivanti Connect Secure · Ivanti Cloud Services Appliance · Ivanti Endpoint Manager (EPM) · Ivanti Endpoint Manager Mobile (EPMM) · Ivanti Secure Appliance (ISA / PSA) · Ivanti Policy Secure · Ivanti Sentry · Jackson · Jenkins · Jira Service Management · Jira Software · jQuery · jQuery UI · JSON-java (org.json) · JsonPath (Jayway) · Juniper EX Series (hardware) · Juniper MX and M Series (hardware) · Juniper QFX Series (hardware) · Juniper SRX Series (hardware) · Juniper Junos OS · Kaseya VSA · Keycloak · Knockout.js · Kubernetes · Lodash · Apache Log4j · Logback · LoopBack · Magento · ManageEngine Endpoint Central · MariaDB · Mattermost · Micrometer · Microsoft 365 Apps · BizTalk Server · Microsoft Build of OpenJDK · Microsoft Configuration Manager · Dynamics AX · Dynamics 365 Business Central on-premises · Dynamics CRM · Dynamics 365 Customer Engagement (on-premises) · Dynamics GP · Dynamics NAV · Dynamics SL · Microsoft Entra Connect · Microsoft Hyper-V Server · Skype for Business Server · System Center · Modernizr · Moment.js · MongoDB · Moodle · Microsoft Exchange · Microsoft SQL Server · MuleSoft Runtime · MySQL · MySQL Connector/J · Neo4j · NestJS · NetApp ONTAP · NetBackup Appliance OS · NetScaler ADC · NetScaler MPX / SDX (hardware) · Nextcloud · Next.js · Nexus · NGINX · Node.js · Nomad · NumPy · Nutanix AOS · Nutanix Files · Nutanix Prism · Nuxt · Microsoft Office · Office Online Server · OpenSSL · OpenVPN · OPNsense · Oracle ADF · Oracle APEX · Oracle Database · Oracle E-Business Suite · Oracle Forms and Reports · Oracle GraalVM · Oracle HTTP Server · Oracle Identity and Access Management · Oracle JDK · Oracle Linux · Oracle PeopleSoft · Oracle SOA Suite · Oracle Solaris · Oracle WebLogic Server · Palo Alto Networks PA-Series (hardware) · Palo Alto Expedition · Palo Alto GlobalProtect · PAN-OS · PaperCut NG/MF · Passport.js · PHP · PostCSS · PostgreSQL · PowerShell · Progress LoadMaster · Progress MOVEit Automation · Progress MOVEit Transfer · Progress WhatsUp Gold · Progress WS_FTP Server · Protocol Buffers · Protractor · Proxmox VE · Python · QNAP NAS · Quarkus · Querydsl · RabbitMQ · Ruby on Rails · React · Reactor Netty · Red Hat Ansible Automation Platform · Red Hat OpenShift · Red Hat build of OpenJDK · Red Hat JBoss EAP · Red Hat JBoss Web Server · Red Hat OpenStack Platform · Red Hat Satellite · Red Hat Virtualization · Redis · RequireJS · RHEL · Rocket.Chat · Rocky Linux · RouterOS · SAP BusinessObjects BI · SAP ECC 6.0 / Business Suite 7 · SAP NetWeaver · SapMachine · SharePoint · SLES · SnakeYAML · SolarWinds Orion Platform · SolarWinds Serv-U · SolarWinds Web Help Desk · Apache Solr · SonarQube Server · SonicWall SonicOS · SonicWall Email Security · SonicWall Email Security appliances · SonicWall Firewalls (TZ / NSa / NSsp hardware) · SonicWall Network Security Manager (NSM) On-Prem · SonicWall SMA 100 · SonicWall SMA 1000 · SonicWall SonicWave / SonicPoint access points (hardware) · Sophos Firewall · Sophos Firewall appliances · Sophos UTM · Splunk · Spring Boot · Spring Cloud · Spring Framework · Spring Security · SQLite JDBC · Symfony · Synology DSM · JetBrains TeamCity · Terraform · Thymeleaf · TinyMCE · Apache Tomcat · Trend Micro Apex Central · Trend Micro Apex One · Ubiquiti UniFi · Ubuntu · VMware vCenter · Veeam Backup & Replication · Veeam Backup for Microsoft 365 · Veeam ONE · Visual COBOL · Visual Studio · VMware Aria Automation · VMware Aria Operations · VMware Cloud Foundation · VMware NSX · VMware SRM · VMware Tools · Vue.js · Vuetify · WatchGuard Firebox · webpack · Windows · Windows Embedded · Windows Server · XCP-ng · YUI · Zabbix · Zerto · Zimbra · IBM z/OS · Zyxel NAS · Zyxel ATP/USG FLEX/USG/ZyWALL/VPN.

Source of record, in order: the vendor's published lifecycle documentation; the vendor's lifecycle API; an authoritative security or lifecycle source; a corroborated third-party dataset; endoflife.date, the upstream community dataset we also contribute to. A vendor value read twice and reproduced identically may correct upstream; a disagreement between two vendor sources is a human decision, recorded as a correction with its source.

Corrections contributed upstream

What we find does not stay here: 14 pull requests from endoflife.ai have been merged into endoflife.date (1 open).

Open disagreements — the vendor's page says one thing, the value we serve says another. Each is re-read and resolved by a published correction or an upstream pull request.

Published corrections

Where a vendor's official documentation says something newer or different than the community dataset we build on, we show the vendor's date and record why. We contribute these findings back to the endoflife.date project as we confirm them — a correction that lands there fixes the whole ecosystem, not just our site. We're merged contributors: on July 21, 2026 the endoflife.date maintainers accepted all six correction PRs from our latest verification audit — Windows Server, CentOS Stream, Kubernetes, Ruby, Go, and Veeam. See the full drift study. Each correction is also dated on the change record, with the value we served before, the value we serve now and the source.

Corrections policy

A date on this site changes only when the vendor's own page says so. Before we change a served date by hand, we read the vendor's lifecycle page twice and the two reads must agree; a blog post, a mirror or an AI answer is never a source. Every correction is recorded with the day it was made, the value we served before, the value we serve now and the vendor page it came from, and appears on the change record, which lists the last 180 days. When the community dataset we build on moves a date by a year or more, drops a date or removes a version, that change is held and the last value keeps serving until a person has checked the vendor's page. The share of dates read at the vendor, the rate at which independent sources agree and every open disagreement are on this page, recomputed at every build. If you find a date we show that the vendor's page contradicts, tell us with the form below or by email to [email protected]. Each report is checked against the vendor page named in it; a report the vendor's page confirms becomes a correction on the change record, with its source.

Report a correction

The vendor's own lifecycle page is the one thing we need; a link to it is required. Your email is optional and is used only to tell you what the check found.

Vendor-verified products

Each product below was checked against the linked official vendor lifecycle page on the date shown. Verified products display a ✓ provenance line on their pages.

Honestly unconfirmed

Some projects publish support policies but no per-version dates (React, Docker Engine, NGINX, GitLab, Jenkins, WordPress). Dates we show for them are policy-derived and labeled accordingly — we do not claim vendor verification we can't demonstrate.

Methodology

Verification means a human-reviewed comparison of our published dates against the vendor's own lifecycle documentation — not a blog post, not a mirror, the primary source. Base data comes from the open-source endoflife.date project plus vendor lifecycle pages; risk scores, verification, and corrections are our own layer. Verification coverage expands in ongoing batches, prioritized by product impact. Found an error? Report a correction with the vendor page that shows it (see the corrections policy) — or check any date yourself with the EOL Checker.