Automated Pentest
An agent-run security assessment of your PHP site: bounded, canary-verified, and delivered with a virtual-patch pack for every confirmed finding.
How it works
- Prove ownership. Add a one-line DNS TXT record or a small file to your site. No proof, no probing — ever.
- Approve the plan. We profile your site and generate an exact test plan from a fixed check catalog. The plan is hash-bound: if it changes, your approval no longer counts.
- We run it. Throttled probes (starting under 2 requests/second, latency-adaptive), every request written to a hash-chained audit ledger. DNS is re-verified during the run; if it changes, the run halts.
- Findings are verified. Positives are independently re-tested. CONFIRMED means directly observed and reproduced — version-based findings are honestly capped at POSSIBLY VULNERABLE.
- You get the fix pack. A work-report PDF plus ready-to-apply Nginx/Apache rules and PHP hardening for each finding. Nothing is ever applied to your server by us.
Start a pentest job (sign-in required)
What it checks
- Exposed phpinfo page — max verdict confirmed
- Sensitive files exposed — max verdict confirmed
- PHP version vs CVE floors — max verdict possibly vulnerable
- Baseline security headers — max verdict confirmed
- Cookie security flags — max verdict confirmed
- TLS configuration — max verdict confirmed
- Directory listing — max verdict confirmed
- PHP error disclosure — max verdict confirmed
- Unencoded input reflection — max verdict confirmed
- HTTP methods (TRACE) — max verdict confirmed
- CORS misconfiguration — max verdict confirmed
- Version banner disclosure — max verdict confirmed
- Session upload-progress preconditions — max verdict possibly vulnerable
What it never does
- No exploit payloads — verification uses inert canary tokens and direct observation only. The php2shell exploit trigger is never sent, to anyone, ever.
- No changes to your site: no uploads that persist, no database writes, no shell attempts.
- No probing without verified ownership and an approved plan.
- It is an automated assessment, not a human penetration test: business-logic flaws and chained exploits are out of scope, and we say so in every report.
Pentest plans
| Tier | What you get | Price |
|---|---|---|
| Single Audit Pentest | Full catalog probe + verification + PDF report + virtual-patch pack | $99 / scan |
| Pro Continuous Pentest | Re-scans driven by threat-intel updates for your stack + weekly full re-scan + alerts | $299 / month |
| Enterprise Fleet Guard | Multi-site console + custom virtual patching + SLA | $399 / month |
| Branch Migration Pentest | Pre/post validation around a legacy PHP branch migration | $499+ custom |
These are the Pentest plans — separate from the Patch plans ($299/$399 per year) on the home page. Checkout opens with Stripe shortly; requesting a plan reserves it at this price and nothing is charged now.
Signed-in customers request Pro / Fleet Guard from the Plans section of their account. Branch Migration is scoped per engagement — open a follow-up from your account and we will quote it.