Clients, projects, technologies
Organise your inventory the way you work. The dashboard shows open findings across all projects, sorted by urgency.
Monitoring for tech stacks
Know when your stack needs attention.
EOLARO continuously checks the technologies of your projects and reports known vulnerabilities, end of support and new versions – before your clients ask.
Free plan without payment details · servers in the EU
- Servers in Vienna (EU)
- No cookies, no trackers
- Data processing agreement included
- Cancel monthly
Everything that ages in your projects, in one place
Instead of following changelogs, security advisories and support calendars one by one, you see what needs doing for every client and project.
Vulnerabilities with context
Known vulnerabilities with severity, flagged when they are actively exploited and with the probability of an attack – so you know what comes first.
End of life in good time
EOLARO knows the support periods of languages, frameworks, databases and server software and warns you before a version stops receiving security updates.
Versions kept up to date
Import lockfiles, report versions from a script or CI – with ready-made templates for GitHub, GitLab and Bitbucket – or let EOLARO fetch them from your website. Or simply maintain them by hand.
Notifications where you work
By email, in Slack, Microsoft Teams, Discord or to your own webhook – with an adjustable minimum severity.
Clear ownership in your team
Assign projects and individual findings to a person: everyone sees who is responsible, assignees get notified – and nothing is left lying around because nobody felt responsible. Plus separate clients, roles, an AI prompt per finding and PDF reports for your clients – whether you are a freelancer or an agency.
Support for NIS2, GDPR & co.
Many regulations require you to keep track of known vulnerabilities in your systems and fix them promptly. EOLARO gives you the ongoing overview – per client, project and technology.
NIS2
The NIS2 Directive and its national implementations require affected companies to manage risks – including vulnerability handling and supply chain security. EOLARO shows which of the components you have recorded are affected.
Cyber Resilience Act
Manufacturers of software and connected products will have to identify and fix vulnerabilities in their products and their components (reporting obligations since 09/2026, further obligations from 12/2027). EOLARO monitors your projects’ dependencies – for example automatically from the lockfile.
GDPR, Art. 32
Personal data must be protected according to the state of the art. Supported software without known vulnerabilities is part of that – EOLARO tells you when a recorded version reaches end of support or a vulnerability becomes known in public databases.
ISO 27001 and BSI IT-Grundschutz
Managing technical vulnerabilities (ISO/IEC 27001, Annex A 8.8) and patch and change management (BSI module OPS.1.1.3) need a reliable overview. Ownership, finding status and PDF reports help you provide evidence.
EOLARO is an aid, not legal advice. Whether and which obligations apply to you and how to meet them is best clarified with your legal or security advisor.
What EOLARO monitors
From the operating system to a single package: you decide what belongs to a project, EOLARO checks every version. The names below are just examples – you can add any package from eleven ecosystems and hundreds of other products.
Programming languages and runtimes
Version and end of support of the language your project runs on.
Frameworks and CMS
Vulnerabilities, end of life and new releases.
Databases, servers and operating systems
Support periods and new versions of hundreds of products.
Packages from eleven ecosystems
Any package published there, not just popular ones – by hand or automatically from the lockfile.
Not listed? Add your own entry – with a package name or product and, if you like, a GitHub repository for its security advisories. Lockfiles (composer.lock, package-lock.json, pubspec.lock) add the direct dependencies automatically and keep them up to date; other formats via script.
Ready in three steps
No agent on your servers, no access to your code.
-
1
Create a project
Add clients and projects and their technologies – via search, from a lockfile or automatically.
-
2
Let it check continuously
Depending on your plan, EOLARO checks every version daily up to hourly.
-
3
Work through findings
Assign to a person, fix, resolve. That way it is clear who takes care of each finding. Resolved items disappear, new findings arrive as notifications.
Pricing
Start for free. Switch plans or add add-ons as your inventory grows.
Free
To try it out
€0free
- Clients: 1
- Projects: 2
- Technologies: 100
- Members: 1
- Check interval: daily
- Notifications: weekly email
- Lockfile import and scripts
Starter
For freelancers and small teams
€19/ month
€190/ year
- Clients: 5
- Projects: 10 expandable
- Technologies: 750 expandable
- Members: 2 expandable
- Check interval: every 2 h expandable
- Notifications: instant email
- Instant check (on add, “Check now”)
- Lockfile import and scripts
- Exploit risk (KEV, EPSS)
Pro
For agencies and dev teams
€49/ month
€490/ year
- Clients: 25
- Projects: 40 expandable
- Technologies: 3,000 expandable
- Members: 5 expandable
- Check interval: hourly
- Notifications: + Slack, Teams, Discord, webhook
- Instant check (on add, “Check now”)
- Lockfile import and scripts
- Exploit risk (KEV, EPSS)
- AI prompt per finding
- Roles and permissions
Agency
For many clients and projects
€119/ month
€1,190/ year
- Clients: unlimited
- Projects: 150 expandable
- Technologies: 10,000 expandable
- Members: 15 expandable
- Check interval: hourly
- Notifications: + Slack, Teams, Discord, webhook
- Instant check (on add, “Check now”)
- Lockfile import and scripts
- Exploit risk (KEV, EPSS)
- AI prompt per finding
- Roles and permissions
- PDF report for clients
Limits marked “expandable” can be raised with add-ons without switching plans. Add-ons ↓
Enterprise
Custom limits, your logo in the PDF report, a dedicated contact and individual agreements.
Compare all plans
| Free | Starter | Pro | Agency | |
|---|---|---|---|---|
| Limits | ||||
| Clients | 1 | 5 | 25 | unlimited |
| Projects | 2 | 10expandable | 40expandable | 150expandable |
| Technologies | 100 | 750expandable | 3,000expandable | 10,000expandable |
| Members | 1 | 2expandable | 5expandable | 15expandable |
| Check interval | daily | every 2 hexpandable | hourly | hourly |
| Features | ||||
| Notifications | weekly email | instant email | + Slack, Teams, Discord, webhook | + Slack, Teams, Discord, webhook |
| Instant check (on add, “Check now”) | – | |||
| Lockfile import and scripts | ||||
| Exploit risk (KEV, EPSS) | – | |||
| AI prompt per finding | – | – | ||
| Roles and permissions | – | – | ||
| PDF report for clients | – | – | – | |
Add-ons
More projects, technologies, members or hourly checks without switching plans. Add-ons run on your plan’s billing period.
| Add-on | Includes | Month | Year | Available in | max. |
|---|---|---|---|---|---|
| Project pack S | +10 projects, +1,000 technologies | €19 | €190 | Starter, Pro | 5 |
| Project pack L | +50 projects, +5,000 technologies | €69 | €690 | Agency | 10 |
| Technologies S | +1,000 technologies | €12 | €120 | Starter, Pro | 10 |
| Technologies L | +5,000 technologies | €39 | €390 | Pro, Agency | 10 |
| Member | +1 member | €5 | €50 | Starter, Pro, Agency | 50 |
| Hourly checks | check interval 2 h → 1 h | €10 | €100 | Starter | 1 |
- All prices net plus VAT. You see the final price before every purchase.
- Yearly = 10 monthly prices. Upgrades apply immediately and are prorated, downgrades from the next period.
- Cancel at any time to the end of the billing period. Refund without giving reasons within 14 days of the first payment for a plan (see refund policy).
- If you reach a limit, your inventory is still monitored – you just cannot add new items.
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Terms · Refunds
Frequently asked questions
Who is EOLARO for?
For everyone who looks after websites, apps or servers professionally – freelancers, self-employed developers, agencies, IT service providers and companies with their own development teams.
Can I use EOLARO as a freelancer?
Yes. EOLARO contracts with businesses, which includes everyone who uses EOLARO for their trade or self-employed professional activity – freelancers, sole traders and small businesses too. EOLARO is not intended for purely private use.
Does EOLARO help with NIS2 or the Cyber Resilience Act?
EOLARO supports the vulnerability and patch management that NIS2, the Cyber Resilience Act, Art. 32 GDPR or ISO 27001 require: you continuously see which of the components you have recorded have known vulnerabilities or no longer receive updates, who is responsible and what has been done. EOLARO does not fulfil these obligations for you and is not legal advice.
Can I assign findings and projects to people?
Yes. You can assign projects and individual findings to members of your organisation. The person is notified, and everyone can see on the finding who is responsible. That way every vulnerability and update has clear ownership – even across many clients and projects.
Which technologies can I monitor?
Programming languages and runtimes such as PHP, Node.js, Python or Java, frameworks and CMS such as WordPress, TYPO3, Laravel, React or Django, databases, web servers and operating systems, and any package from npm, Composer, PyPI, Maven, NuGet, Go, RubyGems, crates.io, pub.dev, Swift and Conan. If something is not in the catalogue, you add it as your own entry.
Do I need to give access to my servers or code?
No. You can enter versions by hand or upload a lockfile. To automate, use our script or a CI step, or let EOLARO fetch a file on your website.
What counts as a technology?
Every monitored component with a version: a programming language, a framework, a database, server software or a single package from a lockfile.
Where is my data stored?
On our own server in Vienna, with encrypted backups in the EU. We use no cookies or trackers. The data processing agreement is included.
Is there a trial?
The Free plan is free forever and needs no payment details. Try EOLARO with two projects and switch whenever you like.
How do I pay and cancel?
Billing runs via Paddle with card, PayPal and other methods. Invoices and cancellation are in the app under Plan & billing.
Contact
Questions about EOLARO, billing or privacy? Write to us – we reply as soon as we can.