---
title: endoflife.ai
description: Track end-of-life risk across 500+ products in Datadog
breadcrumbs: Docs > Integrations > endoflife.ai
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# endoflife.ai
Supported OS Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}
   EOL Risk Overview dashboard: KEV exposure, scores, and EOL deadlinesRisk grades, actively exploited (CISA KEV) products, and risk tableRecommended monitor: Product at Critical EOL Risk
## Overview{% #overview %}

The endoflife.ai integration brings software end-of-life (EOL) risk intelligence into Datadog. Your security and platform teams can use it, right alongside the rest of their monitoring, to see which software in your environment is unsupported and dangerous.

endoflife.ai tracks 8,000+ versions of 500+ products and assigns each one an EOL Risk Score (0-100) calculated from four factors:

- **EOL Recency**: How long a release has been past end-of-life
- **Attack Surface**: How widely deployed and exposed the technology is
- **CISA KEV Exposure**: Whether it appears in CISA's Known Exploited Vulnerabilities catalog
- **Extended Support**: Whether a vendor or third party still offers patches

This integration pushes those Risk Scores into Datadog as metrics, tagged by product, so you can build dashboards, set alerts, and treat lifecycle risk as a first-class signal - not a spreadsheet someone updates once a quarter.

EOL software is the blind spot most vulnerability scanners miss: CVE advisories are written against supported versions, so an unsupported build can share the same vulnerable code yet never trigger an alert. This integration makes that blind spot visible inside the platform your teams already live in.

The integration ships with:

- An out-of-the-box EOL Risk Overview dashboard, which includes:
  - Average risk score
  - Products by risk grade
  - Highest-risk products
  - EOL urgency ranking
  - Intersection of unsupported and actively exploited products
- A recommended monitor, Product at Critical EOL Risk, that alerts when any tracked product's Risk Score crosses into the Critical band

## Setup{% #setup %}

The integration pushes EOL Risk Scores to Datadog using the Datadog Metrics API - no Agent installation or infrastructure change required.

1. In Datadog, go to **Organization Settings** > **API Keys** and create (or copy) an API key.
1. Configure the endoflife.ai exporter with your Datadog API key and site (for example, `datadoghq.com` or `datadoghq.eu`).
1. Run the exporter on a schedule (for example, daily). It fetches the latest EOL Risk Scores from endoflife.ai and submits them to your Datadog account.
1. Confirm data is flowing in **Metrics** > **Summary** by searching for `endoflife.risk_score`.

Full setup instructions and the exporter are available at [https://endoflife.ai/api](https://endoflife.ai/api).

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **endoflife.risk_score**(gauge)        | EOL Risk Score (0-100) for a tracked product; higher means more dangerous to run past end-of-life. Tagged by product / grade / eol_label / eol_date / kev_active.                         |
| **endoflife.days_until_eol**(gauge)   | Days remaining until (or since if negative) a product's end-of-life date. Powers countdown and urgency widgets. Tagged by product / grade / eol_date.*Shown as day*                       |
| **endoflife.kev_factor_score**(gauge) | The CISA Known Exploited Vulnerabilities component of the Risk Score in isolation (0-20). Nonzero only when the product has an active KEV entry. Tagged by product / kev_active.          |
| **endoflife.stack_risk_score**(gauge) | EOL Risk Score scoped to hosts actually detected in your Datadog account (via dd_stack_scan.py) rather than the full generic catalog. Tagged by host_name / product / grade / kev_active. |

## Uninstallation{% #uninstallation %}

1. Stop the scheduled exporter job (for example, the daily cron or CI workflow that runs the endoflife.ai exporter).
1. Revoke or delete the Datadog API key used by the exporter, if it is not used elsewhere.
1. Optionally delete the EOL Risk Overview dashboard and the Product at Critical EOL Risk monitor. The `endoflife.*` metrics stop accumulating as soon as the exporter no longer runs.

## Support{% #support %}

Need help? Contact endoflife.ai support at [partners@endoflife.ai](mailto:partners@endoflife.ai). We typically reply within one business day.

Troubleshooting tips: Metrics should appear in **Metrics** > **Summary** within a few minutes of a successful run. If no `endoflife.risk_score` metrics appear, confirm your Datadog API key and site are correct and that the exporter ran without errors. If scores look stale, schedule the exporter daily so scores track endoflife.ai's daily rebuild. Full documentation is available at [https://endoflife.ai/api](https://endoflife.ai/api).
