Keep your infrastructure
up to date

Scan hosts for available updates, apply security patches with one click, and track full patch history with log output per host. Detects when a reboot is needed after kernel updates.

Automatically discovers Docker Compose stacks on any host, detects when newer container images are available, and updates stacks with one click. Full update logs and release note links included.

At-a-glance status for all hosts and stacks in one view. Clickable filter cards let you drill into hosts that need updates, are pending a reboot, or have available Docker image updates.

Supports Debian, Ubuntu, Kali Linux, Arch, CachyOS, and Proxmox VE. QuietKeep runs the right package manager commands for each host automatically.

Full theme support built in. Choose light, dark, or follow the system preference. Theme is stored per-user and applied immediately without a page reload.

Built-in CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by vendor, threat actor, or time range. Tracks ransomware-linked CVEs so you know which vulnerabilities matter most.

A guided setup wizard with pre-flight system checks walks you through initial configuration. SSH settings, scan intervals, and theme preferences are all managed from the built-in settings page.

Single-user login with bcrypt-hashed passwords and JWT session tokens. Optional TOTP two-factor authentication via any standard authenticator app. Password reset requires server access, not email.

Sortable table showing OS name, kernel version, uptime, reboot status, and sudoers configuration for every host. Spot outdated kernels, long-running hosts, or missing sudo rules at a glance.