endoflife.ai is a free public platform for software end-of-life intelligence, built on top of the endoflife.date open dataset. Check whether a dependency is outdated, unsupported, or a security risk — instantly and for free.
Data sourced from endoflife.date, NVD, CISA KEV, and official vendor lifecycle pages. How we source data →
Instant lifecycle status for any software product. Paste in a product name and know your risk in seconds.
CVE reporters only test supported software. When a vulnerability is discovered in code that also exists in your EOL version, they don't check — and neither does your scanner.
Security researchers report vulnerabilities in supported versions only. EOL versions share the same vulnerable code but never appear in the advisory.
Your vulnerability scanner checks CVE affected version ranges. Your EOL version falls outside that range. No alert fires. You believe you're safe.
Threat actors read advisories and diff patches. They test EOL builds systematically. This isn't a zero-day — it's worse. They know. You don't.
Every product and version page on endoflife.ai displays a proprietary 0–100 risk score — calculated at build time from four factors your vulnerability scanner doesn't track.
Guides, timelines, and analysis for security and engineering teams managing software lifecycles.
Once a month — the most critical end-of-life dates, CVE blind spots, and lifecycle changes worth knowing about. Curated from endoflife.date, vendor advisories, and CISA KEV. Signal, not noise.