PHP Patch Service

How it works

1. Detect. Free external scan now; a read-only deep check on your server for a certain answer (most sites hide their PHP version — we verify you own the site first, then show you the exact plan).
2. Snapshot. Before anything changes, we snapshot your runtime and restore-test the snapshot. If the safety net doesn't work, we don't touch your site.
3. Patch. One click, with the old version kept serving until the patched build is verified. If our checks fail afterwards, the patch reverts automatically — free on every paid tier.
4. Verify & report. Post-patch verification, then a PDF work report with an executive summary, the full audit trail, and a SHA-256 integrity hash.
5. Rollback. Changed your mind days later? One-click rollback to the exact pre-patch state, verified against the pre-patch baseline.

Nothing is patched without your approval of the exact plan, and nothing is patched on a site you have not proven you own. How access works, end to end: Security & disclosure.

Pricing

The $49 tier's rollback lock is shown here and again in the plan you approve before we patch — an upgrade, never a surprise. And the guarantee: if a patch cannot be completed, or we cannot restore your pre-patch state, you pay nothing — a 100% refund. Recurring protection (we watch every PHP security release and re-patch on approval; multi-URL smoke tests and soak monitoring arrive with it): $299/year for Patch customers, $399/year for Patch + Rollback customers. Launches soon.

Order Patch — $49 Order Patch + Rollback — $99

Ordering records your patch job; payment runs through Stripe checkout. Not sure of your version yet? Scan your site free first.

Scope, stated plainly

• Paid patching covers Docker runtimes. The runtime image is rebuilt to the fixed release behind a restore-tested snapshot, verified, and only then takes traffic.
• End-of-life branches (below 8.2) have no upstream fix; on Docker we perform the branch upgrade on the same snapshot-first, verified-rollback rails, with the compatibility risk stated in the plan you approve.
• Not on Docker? The free scan and the read-only deep check still apply. Open a follow-up from your account and we will tell you plainly what we can and cannot do before you pay anything — the 100% refund promise below covers every paid job.
• Your database is never touched during a runtime patch, and snapshots are deleted at the end of their window (72 hours on Patch, extended on Patch + Rollback) or earlier on request.

The guarantee: if a patch cannot be completed and verified, or the pre-patch state cannot be restored, the fee is refunded in full — 100%.

Our products

• Free Vulnerability Scanner — Check a site now — no sign-up, no exploit probes
• PHP Patch Service — One-time verified patch — $49 / $99 with rollback
• Patch & Monitor Plans — Scheduled re-scans + change alerts — $299/$399 a year
• Automated Pentest — Canary-verified assessment + virtual-patch pack — $99