About FixedIn
One question, answered fast: is this version of my software safe to run, and if not, what do I upgrade to?
Why it's more accurate
- We read each vendor's own version ranges, compare them with OSV, and a person reviews every case where they disagree.
- CISA's list of actively exploited vulnerabilities is built in.
- Two upgrade targets: the nearest fix in your release line, and the lowest release that is fixed and still supported.
- We never say "secure". If something couldn't be checked, the result says so.
Questions
Is it free?
Yes. It's free, with no limits and no account: the website, the Markdown and JSON pages, and the MCP server.
Where does the data come from?
The official CVE List (vendors' own version ranges), OSV.dev, CISA's Known Exploited Vulnerabilities catalog and endoflife.date. We compare the vendor ranges with OSV, and a person reviews every case where they disagree.
I installed it with apt or yum. Is the result right for me?
Not always. Linux distributions often backport fixes without changing the version number, so check your distribution's security tracker too. Distro-aware checks are on the way.
Does "no known vulnerabilities" mean my server is secure?
No. It means no vulnerability we know about affects that version, as of the date shown. Configuration, plugins and your own code matter too.
How do AI agents use it?
Connect the MCP server at /mcp, or read any page as Markdown by adding .md to its address (or asking for text/markdown). /llms.txt explains the addresses.
Do you track me?
No cookies and no third-party trackers. We count usage with an anonymous, salted hash of your IP address and never store the address itself, and we delete usage data after 180 days. If you ask to be notified, we keep your email only for that, and delete it whenever you ask.