Software End of Life Checker: Is Your Software Still Supported?
This free software end of life checker tells you whether the operating systems, runtimes and databases you run have reached their end of life (EOL) date, and how long until the next one does. Paste a list of products and versions, one per line, and you get a status, the end-of-support date and what to do next. It runs in your browser and nothing is sent anywhere.
- Free
- No signup
- Runs in your browser
- Windows, Linux, runtimes, databases
- CSV export
How it works
- 1Paste your listType or paste products and versions, one per line, as you would write them.
- 2We match each versionEach line is matched to a product and release branch, then compared with its end-of-life date.
- 3See what to replace firstItems are sorted into end of life, ending within 12 months and supported, with a next step for each.
How this software end of life checker works
The software end of life checker reads each line you enter, matches it to a product, finds the release branch that your version belongs to, and compares that branch's end-of-life date with today's date on your device. The result is one of three states: end of life, ending within 12 months, or supported. Lines it cannot match are listed as "not recognised" so nothing is silently skipped.
The built-in list covers operating systems (Windows, Windows Server, Ubuntu, Debian, Red Hat Enterprise Linux, CentOS, Amazon Linux), languages and runtimes (PHP, Python, Node.js, Java, .NET, Ruby), databases (MySQL, MariaDB, PostgreSQL, MongoDB, Microsoft SQL Server), server software (Apache HTTP Server, Tomcat, Exchange, SharePoint, VMware ESXi) and libraries and frameworks (OpenSSL, Log4j, Django, Laravel, Drupal).
What end of life means
End of life (EOL) is the point where a vendor stops shipping security updates for a version. The related terms are easy to mix up.
| Term | What it means |
|---|---|
| End of life (EOL) | No more security fixes or support from the vendor for that version. |
| End of support | Often the same date. Some vendors separate mainstream support, which adds features and fixes, from extended support, which gives security fixes only. |
| LTS (long-term support) | A release that gets security fixes for longer than a normal release, such as Ubuntu 24.04 LTS or Node.js 22. |
| ESU (Extended Security Updates) | Paid security updates sold after EOL, for example for Windows 10 and Windows Server 2012. |
Notable end-of-life dates
These are the dates people look up most often. The checker above works out how long ago each passed, or how long is left, from your own clock.
| Software and version | End of security support |
|---|---|
| Windows 10 | 14 October 2025 |
| Windows Server 2012 and 2012 R2 | 10 October 2023 |
| Windows Server 2016 | 12 January 2027 |
| Ubuntu 20.04 LTS | 31 May 2025 |
| Ubuntu 22.04 LTS | 1 June 2027 |
| CentOS Linux 7 | 30 June 2024 |
| PHP 7.4 | 28 November 2022 |
| PHP 8.1 | 31 December 2025 |
| Python 3.9 | 31 October 2025 |
| Python 3.10 | 31 October 2026 |
| Node.js 18 | 30 April 2025 |
| Node.js 20 | 30 April 2026 |
| MySQL 5.7 | 31 October 2023 |
| MySQL 8.0 | 30 April 2026 |
| PostgreSQL 14 | 12 November 2026 |
| Microsoft Office 2021 | 13 October 2026 |
| Microsoft SharePoint Server 2016 | 14 July 2026 |
| .NET 8 | 10 November 2026 |
Why end-of-life software is a security risk
End-of-life software is a security risk because new vulnerabilities in it never get a patch. Attackers read vendor advisories and CVE records, and old versions of operating systems, web servers and libraries are easy targets because the flaw is public and the fix will never come. Log4j 1.x and Windows Server 2012 are well-known examples of components that stayed in production long after support ended.
It is also a compliance problem. ISO/IEC 27001 expects you to manage technical vulnerabilities, and NIS2 Article 21(2)(e) names vulnerability handling as one of its required measures. Auditors and cyber insurers ask for an inventory of what you run and whether it is supported.
What to do when software reaches end of life
Work through the list in this order.
- Upgrade to a supported version. Check release notes and test first, because the jump from an old branch to a new one often breaks things.
- Buy extended support if you cannot upgrade yet. Microsoft ESU, Ubuntu Pro and Red Hat extended life-cycle support exist for this purpose and are meant as a bridge, not a destination.
- Isolate what you cannot patch. Move it to its own network segment, close every port it does not need, and allow access only from the systems that depend on it. The firewall rule generator writes the rules.
- Add compensating controls. A web application firewall, intrusion detection and stricter access rules reduce the chance of exploitation.
- Find the known vulnerabilities that apply to the version and fix the worst first. The CVE Priority Checker ranks CVEs by exploitation evidence.
- Record the decision. If you accept the risk for now, write down the owner, the reason and a deadline.
Where the dates come from
The dates come from the lifecycle policies each vendor publishes. For anything you plan to act on, check the vendor's own page: Microsoft Lifecycle, Ubuntu release cycle, Red Hat life cycle, Debian releases, PHP supported versions, Python versions, Node.js releases and PostgreSQL versioning. The community site endoflife.date also tracks many products.
Linux distributions that rebuild upstream software, and managed cloud services, can keep fixing a version after the upstream project stops. If you run a distribution package, use the distribution's date, not the upstream one.
Frequently asked questions
What is an end of life (EOL) date?
An end of life date is the day a vendor stops providing updates for a product or version. After that date there are normally no new security patches, bug fixes or technical support, so any vulnerability found later stays open. Some vendors sell paid extended support past that date.What is the difference between end of life and end of support?
The terms are often used for the same event, but vendors use them differently. End of support or end of security support is when patches stop. End of life usually means the product is retired. Some vendors have an earlier mainstream support end and a later extended support end, so always check which date a table refers to. This tool shows the date when security updates stop.Is Windows 10 end of life?
Yes. Free support for Windows 10 ended on 14 October 2025 for Home, Pro, Enterprise and Education. Microsoft sells Extended Security Updates (ESU) for a limited time: the consumer programme runs until 13 October 2026 and business customers can buy up to three years. The Windows 10 LTSC editions have their own later dates.How do I find which software on my network is end of life?
Start with an inventory of operating systems, runtimes, databases, web servers and libraries. Paste the list into this software end of life checker for a first answer. To find versions you did not know about, scan your network and read the results with the Nmap Output Explainer, which also flags old services. Then rank the findings with the CVE Priority Checker.What happens if I keep using end-of-life software?
It keeps working, but every new vulnerability stays unpatched. Attackers read vendor advisories and target old versions because they know no fix is coming. End-of-life software also causes failed audits and can breach rules such as ISO/IEC 27001 and NIS2 that expect you to manage technical vulnerabilities.Does end of life mean the software stops working?
No. The software keeps running exactly as before. What stops is the supply of security fixes and vendor help. That is why end-of-life systems are dangerous: nothing breaks, so nobody notices the risk.How up to date are the dates in this tool?
The dates were reviewed in October 2026 against vendor lifecycle policies. Vendors sometimes move dates, so confirm anything important on the vendor page linked in the guide above. The status and the time left are calculated from today's date on your device.Is my software list sent to ScanTitan?
No. The check runs entirely in your browser against a list built into the page. What you type is not sent anywhere and is not stored.Knowing a version is end of life is step one. Find which internet-facing systems still run it.
Run a free network scanSee pricing