PHP security check

Does your website need the PHP security update?

PHP, the software most business websites run on, released a critical security update on 21 October, fixing two flaws rated 9.2 out of 10. An unpatched site can be taken over. Tell us your web address and we will check whether yours needs it, what the fix is, and what it costs.

An address at your website's domain is quickest.

We only show the result once we know the site is yours. The check loads your front page once, the way any visitor's browser does, and reads your public DNS records. It never tries to break in. We keep your name, email, web address and the result so we can follow up, and nothing else. See our privacy policy.

What the results mean

You get one of three results, each with what to do about it and a fixed price before any work starts.

Good
Your site already has the fix, or runs on a platform that patches itself.
Needs attention
Your site runs a PHP version that needs the update, or one that no longer gets fixes.
Unable to determine
Your site does not say what it runs. A look inside settles it.

What a check from outside cannot see

Many websites keep their PHP version to themselves, which is good practice. When yours does, the result is "Unable to determine", never "Good", and the next step is a look inside with whoever runs your hosting.

Some servers get security fixes from their Linux distribution, such as Ubuntu or Debian, without the version number changing. When we see one of those, we tell you how to confirm it rather than calling it vulnerable.

This is not a full security assessment. It answers one question, on the day you run it: does this site need the October PHP update?