Google has announced the release of Vanir, a new open-source security patch validation tool designed to help Android platform developers quickly identify missing security patches in their custom platform code. Vanir uses source-code-based static analysis to compare target source code against known vulnerable code patterns, providing a scalable and sustainable solution for security patch adoption and validation. The tool supports C/C++ and Java targets and covers 95% of Android kernel and userspace CVEs with public security patches. Vanir is fully open-sourced under the BSD-3 license, allowing for easy integration into continuous build or test chains and adaptation to other ecosystems. Since its early development, Vanir has been integrated into Google's build system, testing against over 1,300 vulnerabilities and saving internal teams over 500 hours in patch fix time. Vanir is now available for public use and can be accessed at github.com/google/vanir.