Read the pools, sockets, and php_admin_value settings that decide whether FPM is actually the exposed SAPI.
Who it is for
Nginx or Apache estates with more than one pool or an unclear map from vhost to socket.
PHP2Shell remediation for every PHP version, including PHP 5.6 and legacy environments, is in scope when you need it. Still running PHP 5.6, PHP 7.x, or an unsupported release? The work is to evaluate a real fix and avoid an unnecessary outage. It is not a claim that every version has a vendor patch.
What you receive
A pool map, the settings that weaken or support the temporary mitigations, and the restart units.
Limits
The review does not declare FPM immune. PHP’s advisory does not either.
No customer counts, certifications, or response-time promises are stated because none are configured. Contact details are on the contact page and only work once an email or booking URL is set.
How an engagement usually moves
- Assess the environment you can show us.
- Identify the safest supported fix, or say that none is published.
- Implement with a rollback, or hand the plan to your admins.
- Validate the running SAPI.
Discuss the estate from the contact page.
Questions
How much does this cost?
Pricing is not published. It depends on how many runtimes and applications are in scope.