There is no sign-up, no login and no subscriber list. Patchwire sets no cookie.

Nothing on this site or in its feeds is tied to a person.

Starred stacks are kept in your browser's local storage, under a key that starts with patchwire. They are never sent to the server.

Clearing this site's data in your browser removes them.

Agents send package names or advisory ids to the MCP server and get advisories back. Patchwire does not store or log these names, and never receives a version: agents compare the returned ranges with their own lockfile.

Reading the JSON and RSS feeds sends nothing but the request itself.

Vercel Web Analytics counts page views, with the page, the referrer, the country and the device type. It sets no cookie and does not follow you across sites.

Vercel Speed Insights measures how fast pages load. Neither is used on the MCP server or the feeds.

The site runs on Vercel, in the United States. Like any web host, Vercel keeps short-lived request logs (address, path, browser) to run and protect the service.

The database holds public security advisories and the logs of Patchwire's own reading runs, nothing about visitors.

Claude, Anthropic's model, reads public advisories to write down the conditions that make them exploitable. It never reads anything you send to Patchwire.

Questions or requests: hello@monowire.dev. Last updated 24 Oct 2026.