Consulting services
Engagements are scoped to the runtime you actually run. We do not publish a price list, and we do not promise that every legacy branch can be patched in place.
ConsultingApache and PHP consultingDetermine whether Apache embeds mod_php or proxies to FPM, then patch the right process.ConsultingEmergency PHP securitySame-week help when an internet-facing runtime is still on a vulnerable build.ConsultingLegacy PHP securityRemediation planning for PHP 5.6, 7.x, and other unsupported branches that still run the business.ConsultingNginx and PHP consultingTrace Nginx server blocks to PHP-FPM and make the PHP change without confusing it for an Nginx CVE.ConsultingPHP incident responseHelp contain a host where you suspect the worker was used, then return service on a patched runtime.ConsultingPHP version upgradesMove an application from the PHP it has to a fixed, supported runtime without treating the move as a one-line package bump.ConsultingPHP vulnerability assessmentA point-in-time assessment of which runtimes are in the fixed range for these two CVEs.ConsultingPHP-FPM reviewRead the pools, sockets, and php_admin_value settings that decide whether FPM is actually the exposed SAPI.ConsultingPHP2Shell remediationA focused engagement to identify the exposed runtimes, choose a real fix, and verify it.ConsultingProduction PHP patchingExecute a rehearsed package or image change on production after staging has passed.