Free website checker and response guide for PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Website and code security scanning with automated fix reports
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
AU
Pricing model
Freemium
Freemium
Pricing
Free website checker for single URLs and free PHP version checking tool in browser. Batch checker, CI integration, and offline analysis available for $99 one-time payment via Stripe.
Free plan: A$0/month, 1 site, 1 public repository, one scan per month. Solo: A$29/month or A$290/year (2 months free), 1 site, 3 repositories, weekly rescans. Pro: A$99/month or A$990/year (2 months free), 3 sites, 10 repositories, daily rescans, 500 CI/API runs per month. Agency: A$299/month or A$2
Key features
Free website checker for PHP2Shell exposure without exploit attempts
PHP version checker that runs entirely in browser
Open-source TypeScript analyzer for integration into other tools
Handles hidden PHP versions and distro backports
Batch checking and CI integration for multiple sites
Detection results in JSON, CSV or table format
Vendor-neutral security advisory compilation
FAQs covering affected versions, server setups and mitigation strategies
Timeline of vulnerability disclosure and patch releases
27 read-only security checks across seven groups
Grades sites A to F with detailed fix reports
REST API for registering sites and starting scans
Ownership verification via DNS record or file
Automated scheduled rescans at plan frequency
CI/CD integration with GitHub Actions and CLI
AI code review with Claude-powered agents
Runtime SDK for Python and Node.js middleware
What makes it different
Vendor-neutral and independent, not controlled by any PHP vendor or security company
Detects PHP2Shell exposure using only safe, passive GET requests with no exploit code
Covers all affected PHP versions from 5.4 to 8.5 and handles distro backports
Accessible free checker available immediately without account or payment
Comprehensive response guide with actionable step-by-step instructions for each server setup
First scan is free with no credit card required and no sign-up friction
Same ownership verification and credit system across both web app and API
Fail-open Runtime SDK that hashes client IPs before leaving your process
Automatic refunds for failed scans and code reviews
PHP2Shell Response Guide
Hardn