PHP exposure assessment

Inventory serving runtimes and package sources, check evidence for both CVEs, and document the systems that need changes. The outcome is a prioritized remediation scope, with uncertainties made explicit.

Runtime patching and deployment

Request assistance with PHP upgrades, Docker base images, AWS deployments, WordPress infrastructure and compatibility verification. Work is scoped around backups, a tested change path, service replacement and post-deployment checks.

Post-exposure investigation

Discuss evidence preservation, exposure timelines, suspicious behavior and whether specialist incident response is needed. A patch is not a forensic conclusion. Investigation depth depends on available logs, retention and the systems involved.

How an engagement starts

Response times, pricing and outcomes are confirmed individually. No response-time or cleanup guarantee is implied. Ongoing maintenance and hardening can be scoped separately.

  • Send a brief description of your hosting, PHP version if known and the kind of help you need.
  • Agree the scope, availability, access method and commercial terms before work begins.
  • Share sensitive evidence only through an agreed secure channel. Never submit passwords, SSH keys or tokens in this form.

No credentials in the form. Share only enough context to scope the request. Secure access is agreed separately.