Over the past few months, I’ve been experimenting with building small automation tools to support my Patch Management Series. One of those experiments was a patch ingestion and normalisation tool, a lightweight script designed to pull vendor advisories, clean the data, and present it in a consistent format for analysis.
It worked surprisingly well.
The Patch Tuesday Tracker is an open-source security patch monitoring tool built to support the TayvenSec Patch Management Series. It runs daily via GitHub Actions and automatically collects security patch data across nine major platforms including Windows, Apple, Android, Ubuntu, Red Hat, Debian, Chrome OS, Palo Alto Networks, and Cisco.
Each run generates a combined patch data file, a monthly archive, and a markdown article draft structured in the format of the TayvenSec patch roundup series. The dashboard is published automatically via GitHub Pages, giving a live view of the latest patch activity across all covered platforms. Built for practitioners who want patch intelligence without the manual work.
It aligned perfectly with my automation‑first philosophy, and it helped me understand patch cycles at a deeper level than manual review ever could.
Development is ongoing. My current focus is improving source coverage, refining data normalisation, and validating that patch information is being captured accurately across all supported platforms. The end goal is a fully automated patch intelligence pipeline capable of generating comprehensive monthly patch management articles directly from the collected data, reducing manual effort while improving consistency and coverage.