by originsec · Agent Tool · ★ 23
PatchWatch A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidra (via ghidriff), and surfacing LLM-generated security analysis through a browser UI. PatchWatch wires together a few public data sources and an LLM into a single workflow: Microsoft Security Update Guide (SUG) — CVE metadata, affected products, CVSS, exploited status. Microsoft Support pages + Update Catalog — enumerate which files a given KB ships. Winbindex — locate pre-patch and post-patch binary versions. ghidriff (Ghidra under the hood) — produce structured function-level diffs.
| Stars | 23 |
| Forks | 8 |
| Language | Rust |
| Category | Agent Tool |
| License | Apache-2.0 |
| Quality Score | 65.8710211691832/100 |
| Open Issues | 1 |
| Last Updated | 2026-05-19 |
| Created | 2026-05-13 |
| Platforms | browser, rust |
| Est. Tokens | ~16k |
Explore other popular agent tool tools:
patchwatch is A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analysis through a browser UI. It is categorized as a Agent Tool with 23 GitHub stars.
patchwatch is primarily written in Rust.
You can find installation instructions and usage details in the patchwatch GitHub repository at github.com/originsec/patchwatch. The project has 23 stars and 8 forks, indicating an active community.
patchwatch is released under the Apache-2.0 license, making it free to use and modify according to the license terms.