Confirm your PHP patch status
Ask your host which PHP build is serving your website and whether the security fixes are applied. An external scan alone cannot confirm this.
PHP SECURITY ALERT 21 OCT 2026
Critical PHP flaws.
Critical PHP flaws.
Is your website
protected?
Run a free website security audit for your WordPress, PHP or HTML website. Check what it shows the world and get a clear plan for what to do next.
One website. Instant results. No sign-up needed.
YOUR TECHNOLOGY PARTNER
YOUR SECURITY PLATFORM
SecureFlow
SecureFlowVISIBILITY IS YOUR FIRST DEFENCE
From uncertainty to a clear action plan.
SECUREFLOW + RUAH TECHSecurity illustration. No scan is running.
Built for business websitesWordPress & PHP applicationsPractical remediation guidanceBacked by Ruah Tech
THE ALERT. THE IMPACT. THE NEXT STEP.
A small update.
A big reason to act.
CRITICAL SECURITY ADVISORY01
Updating WordPress alone
doesn’t update PHP.
Your hosting environment needs attention too. Ask your hosting provider to confirm that your website is running a patched PHP build.
Read the official PHP advisoryPatch promptly, with your hosting team
Follow the current PHP and hosting-provider guidance. Don’t wait for an audit before applying a critical update.
Look beyond the PHP update
Review your website’s wider security exposure and turn the findings into a prioritised action plan.
Already on PHP 8.2.35? What you should know
PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 include fixes for the two vulnerabilities disclosed on 21 October. Use your host’s latest suitable patched build and check subsequent advisories too. A patched version does not establish that a website is free from other vulnerabilities or prior compromise.
PHP published additional guidance on session upload progress on 23 October, and updated Windows builds on 26 October. PHP 8.2 reaches the end of official security support on 31 December 2026. Ask your hosting team to review applicability and plan the next upgrade.
Official PHP updates · PHP support lifecycleInformation reviewed 27 October 2026START WITH CLARITY
Your website. Your next move.
Check it for free. Get help fixing what you find.
Keep watching it with SecureFlow.
A SMART FIRST STEP
Free Cyber Audit
An instant check of what your website shows the world.
US$0Completely free
Get My Free Audit
No sign-up needed to see results. No card.
Your public-facing security snapshot
- SSL/TLS certificate
- Security headers and cookies
- Email spoofing protection (SPF/DMARC)
- Whether the site announces a PHP version missing the October 2026 fixes
- A clear summary with recommended next steps
A visible PHP version is an indicator, not proof of the server’s patch status. Hidden versions and vendor-backported fixes need confirmation from your host.
FROM FINDING TO FIX
PRACTICAL HELP FROM RUAH TECH
Get It Fixed
For WordPress and PHP websites, Ruah Tech’s team fixes what the free audit finds.
US$99One-time
Run the free audit first
Request the fix from your audit results.
We confirm the scope with you, then help with
- Security headers
- HTTPS and certificate settings
- Email records (SPF/DMARC)
- Working with your host to move PHP onto a patched release
Nothing is charged until Ruah Tech confirms the scope with you. You’ll need to confirm you own the site or are authorised to arrange work on it. Full penetration testing is a separate service.
STAY AWARE WITH SECUREFLOW
Keep watching it — free
Create a free SecureFlow account for a weekly security check of one website, with an upgrade path to paid plans.
Public checks cover one website and cannot confirm every vulnerability or hidden PHP patch status. Active checks require agreed scope and authorisation. Fixes are limited to the scope confirmed with you; full penetration testing is separate.
CHOOSE YOUR NEXT STEP
Compare Audits
A free check, scoped help with fixes, or ongoing weekly visibility.
Swipe to compare all three options.
| What you get | Free audit | US$99 fix | Free weekly monitoring |
|---|---|---|---|
| Price | US$0 | US$99, one-time | Free, with paid upgrades available |
| Purpose | An instant check of your website’s public exposure | Ruah Tech fixes agreed issues on your WordPress or PHP website | A weekly security check of one website |
| Coverage | SSL/TLS certificate, headers, cookies, SPF/DMARC and announced PHP version indicators | Headers, HTTPS/certificate settings, SPF/DMARC and host-assisted PHP patching | Recurring website checks in SecureFlow |
| Getting started | No sign-up needed to see results | Request from audit results. Scope and ownership or authorisation are confirmed before work; nothing is charged until scope is confirmed. | Create a free SecureFlow account |
| Next step | Get My Free Audit | Run the free audit first | Create a free account |
An outside check cannot confirm hidden or vendor-backported PHP fixes. None of these options is a security guarantee or compliance certificate. Full penetration testing is a separate service.
PREFER TO TALK FIRST?
You don’t need all the answers to get started.
Let’s talk through your website, your concerns and the right next step.
STRAIGHTFORWARD FROM THE START
Less guesswork. More clarity.
We make the next step easy to understand.
1CHECK
Run your free audit
Enter your website URL in SecureFlow for an instant check of its public exposure. No sign-up is needed to see the results.
2UNDERSTAND
See what needs attention
Get a clear view of the checks performed, the findings and anything that needs hosting-side verification.
3TAKE ACTION
Choose your next step
Use the guidance with your team, request a scoped fix from the results, or create a free account for weekly monitoring.
A LITTLE MORE CLARITY
Good questions.
Straight answers.
Security should feel understandable.
Is this relevant if my website uses WordPress?
Yes. WordPress runs on PHP, so the PHP runtime on your server matters as well as WordPress, themes and plugins. Ask your hosting provider to confirm the applicable PHP fixes. The free audit can also review public-facing security on other website technologies; the Get It Fixed offer is for WordPress and PHP websites.
Can an external audit confirm I’m protected?
It can identify visible risks and configuration issues, but it cannot reliably confirm a hidden PHP version, vendor-backported patch or every vulnerability. PHP patch status needs confirmation from your hosting provider. An audit, a scoped fix or weekly monitoring is not a security guarantee or a certificate of compliance.
Will you need passwords or access to my website?
You don’t need to share passwords for the free audit; it checks your public website. Before any fix work, you’ll need to confirm you own the site or are authorised to arrange work on it. We agree the scope and any secure access separately. Active testing also requires agreed scope and authorisation.
What does Get It Fixed for US$99 include?
For WordPress and PHP websites, Ruah Tech’s team fixes what the free audit finds within the scope confirmed with you: security headers, HTTPS and certificate settings, email records (SPF/DMARC), and working with your host to move PHP onto a patched release. Request the fix from your audit results. The price is US$99 one-time; nothing is charged until Ruah Tech confirms the scope with you. Work outside that agreed scope and full penetration testing are separate services.
Is the free audit really free?
Yes. The instant public-facing audit costs US$0. No sign-up is needed to see results, and no card or subscription is required. You can use the recommended next steps with your current hosting or development team. Choosing further support is entirely up to you.
How do I keep watching my website?
Create a free SecureFlow account to get a weekly security check of one website. You can upgrade to a paid plan as your needs grow. Weekly checks track public-facing exposure; they do not replace hosting-side patch confirmation or full penetration testing.
YOUR NEXT STEP STARTS HERE
Protect what
you’re building.
Start with a free audit. Move forward with clarity.
Get My Free AuditBook a Free Consultation