PHP Emergency

Check where your PHP sites stand after the October 2026 security updates

PHP released security updates in October 2026. If your website runs PHP, confirm with your hosting provider that it has been updated, and ask us for an authorized assessment if you are unsure.

Scope

What the assessment answers

Which PHP builds you run

Version, how it was installed (distribution package, hosting panel, source) and the package versions actually present.

Whether fixes are present

Distribution packages can contain backported fixes. We check package-level evidence instead of relying on a version string.

What to do next

A written report with findings, confidence levels and prioritized actions. When the evidence is insufficient, the report says so.

Process

How it works

  1. RequestTell us which domains you are worried about.
  2. ScopeWe confirm what will and will not be checked.
  3. AuthorizationYou sign a written authorization that lists the exact scope and time window.
  4. PaymentPayment confirms the order. It never authorizes testing on its own.
  5. AssessmentA specialist performs the agreed read-only review.
  6. ReportYou receive written findings with the evidence and recommended actions.
Services

Services and draft pricing

Draft pricing. Prices are not final and nothing is on sale yet; you receive a confirmed quote after scope review, before any work or payment.

Questions

Will you scan my website when I send this form?

No. Sending the form only starts a conversation. Nothing is checked until you sign a written authorization that lists the exact scope and time window.

Does paying authorize the work?

No. Payment confirms the order. Work on your systems starts only after a valid authorization is in place.

Can you guarantee my site is safe?

No one can honestly guarantee that. We report what we observed, with evidence and a confidence level, and say clearly when evidence is insufficient.

How quickly will you respond?

We respond as quickly as possible during business hours. We do not publish delivery times until our capacity is confirmed.

Request

Request an assessment

Tell us which domains you are worried about. Sending this form starts a conversation; it does not authorize any testing.

What happens next

  1. We review your requestWe read what you sent and contact you by email.
  2. We confirm the scopeWhich domains and checks are included, and which are not.
  3. You sign a written authorizationNothing is checked on your systems before this step.

Online requests are not open yet. This form is shown for review only and cannot be submitted in this environment. Until then, write to info@tsmartsecurity.com

One per line, for example shop.example.com. Up to 10 public domains you own or manage.
Have you noticed signs of compromise?
Package you are interested in
Do not include passwords, API keys or customer data.

Sending this form does not authorize any testing. We will ask for a separate written authorization first.

Get a Security Assessment