PatchClarity — Distro patch version checker

Helps ops and security teams quickly determine if distro patched packages include upstream security fixes

Problem

Ubuntu and similar distros lock package versions at release, delivering security fixes as distro suffixes (e.g., 8.3.6-0ubuntu0.24.04.13) that look lower than upstream versions (8.3.36). Monitoring teams misjudge this as unpatched and demand remediation, forcing ops staff to repeatedly explain version semantics.

Solution

A query tool that takes distro name, package, and patched version, maps it to upstream CVE fixes, and returns a clear 'fixed or not' verdict with a shareable explanation link, helping ops respond to external audits quickly.

Users

Enterprise ops engineers, security compliance staff, and IT teams responding to vulnerability scan alerts

MVP

Query patched versions for common Ubuntu/Debian packages; aggregate distro security advisories and upstream CVE data; generate shareable fix-status cards; browser extension or CLI for quick lookups; focus on Ubuntu LTS first

Revenue

Free basic lookups; team subscription (bulk queries, API access, compliance report export), or pay-per-query API

Why now

Open-source vulnerabilities are frequent and audits are tightening, creating high communication overhead; distro patch mapping data is public, letting indie developers build fast and focus on one distro