HeroDevs has launched Never Ending Support (NES) for .NET 8, a drop-in replacement for .NET 8 that continues delivering security patches and CVE remediation after first party support ends in November 2026.
When .NET 8 hits end of life (EOL), the upstream .NET project no longer issues security updates. That can be a challenge for organizations running .NET 8 in production that cannot complete a migration to .NET 10 before the deadline.
While enterprises should be planning migration of .NET workloads to in-support versions of .NET, sometimes they need additional runway to make the transition. NES for .NET 6 and 8 offers a relief option, picking up security monitoring and patching for enterprise .NET deployments in the interim.
As a member of the .NET Security Group, the team receives advance disclosure of CVEs affecting the ecosystem and publishes patched builds of .NET 6 and 8 on the same schedule as the .NET project’s monthly Patch Tuesday releases. No compliance gaps, no exposure windows.
HeroDevs goes even further when it comes to .NET ecosystem security. Complimenting Microsoft's bug bounty program for .NET, HeroDevs offers supplemental security bounties for documented vulnerabilities identified in both in-support and EOL versions of .NET. These vulnerabilities are co-reported to the Microsoft Security Response Center. This further secures both upstream .NET for the community and our NES products for our customers.
NES for .NET 6 and 8 is production-ready today for both Windows and Linux, and is already running at scale in customer systems. Organizations can adopt NES for .NET 8 now so the handoff from upstream support to HeroDevs in November 2026 is seamless. This allows teams to plan their migration to .NET 10 on a timeline that balances business resources while remaining secure and compliant.
HeroDevs is a sponsor of the .NET Foundation and maintains a $20 million Open Source Sustainability Fund that supports maintainers across the .NET ecosystem and beyond. The OSSF program focuses on core, foundational open source projects and invites applications by .NET project maintainers.