Fathometer CVE Intelligence

- run a handful of plain root servers / VPSes you administer yourself; - want to know which of the hundreds of CVEs a host reports *actually matter on that host*, not in the abstract; - want a calm, self-hosted, single-operator tool — no SaaS, no account, no data leaving your infrastructure, air-gap-friendly. - scan container images, Kubernetes clusters, or CI pipelines — use Trivy / Grype directly or a platform built for that; - need multi-user RBAC, SSO, or notifications (email / Slack / webhooks); - want enterprise vulnerability management with SLAs, ticketing and mobile dashboards. - Two-tier triage — only Act and Escalate reach you; Watch and Noise stay out of the way. No alarm firehose, no hundreds of "critical" CVEs to wade through by hand. - Real patches, not phantom ones — Fathometer tells apart a fix you can actually apply (dnf/apt upgrade will pull it) from one that only exists upstream inside a statically-linked binary (Go, Rust, Java) and needs a vendor rebuild. It resolves each binary to its owning package and checks your host's repos, so it never tells you to "apply the update" for a patch your package manager doesn't have. - Agent push model — lightweight agents run Trivy on each host and push results; Fathometer never needs credentials to your servers and works air-gapped. - uptime-kuma-style overview — a calm fleet view with per-host heartbeat history, not a metrics dashboard. - One-command onboarding — register or remove a host with a single root command (daily systemd timer, cron fallback). - Self-hosted & single-user — your scan data never leaves your infrastructure. Built for the operator who runs the boxes — no email / Discord / webhook noise by design. Sign-in: this app keeps its own accounts. Each member signs up or signs in inside the app with an app username and password; the hub remembers each member's session. Fathometer CVE Intelligence is the open-source project THEKROLL-LTD/Fathometer (https://github.com/THEKROLL-LTD/Fathometer) by THEKROLL-LTD, released under Apache-2.0. Ion packages it unmodified from commit e7c5e5eeaf6e, adding only a manifest, an icon and a start script.

Written by THEKROLL-LTD, published to Oikou by Ben Grande.

• ★ 36 stars on GitHub
• Licence: Apache-2.0
• Upstream version v0.28.1
• Built from commit e7c5e5eeaf6e

View the repository on GitHub

Not rated. Nobody has said who this app is suitable for, so Personal Clouds and the Oikou app treat it as 18+.

Internet

It asks to reach these hosts, and no others:

• unpkg.com
• cdn.jsdelivr.net
• curl.se
• pkg.go.dev
• access.redhat.com
• avd.aquasec.com
• cdn.tailwindcss.com
• hackerone.com
• lists.debian.org
• nvd.nist.gov
• ubuntu.com
• www.openwall.com
• api.deepinfra.com
• api.novita.ai
• no-color.org

Personal Cloud tools

• Keep a database of its own on your Personal Cloud ion.db

Notifications

It does not send push notifications.

Storage

Up to 512 MB on your Personal Cloud.

Its address

Works best with its own address. A Personal Cloud shared through Cloudflare can give it one; on a private Personal Cloud on Tailscale it opens under your Personal Cloud’s address, where it may not work fully. Private and shared Personal Clouds

Sign in to add this web app to a Personal Cloud of yours. It runs there, on your own computer, and you open it from there; nothing is installed on your phone.

Sign in to add