← phpatch.com home

Terms of Service

PHP Patch Service ("the Service") is operated by Superstar Telecom LLC ("we", "us"). By purchasing a patch engagement you agree to these terms.

1. What the Service does

We scan, patch, verify and report on PHP runtimes on servers you own or are authorized to administer. Each engagement follows the published workflow: external scan, optional read-only deep check, snapshot with restore test, patch, verification, and a written work report.

2. Your authorization

You represent that you own the target systems or hold written authorization from their owner to have them scanned and patched. Deep checks and patches run only after that authorization and our ownership verification.

3. Pricing and rollback

External scan and report: free. Patch: $49 per server runtime. Patch + Rollback: $99. If our own post-patch verification fails, the patch reverts automatically at no charge on every paid tier. On the $49 tier, a rollback you request later is a $50 unlock, disclosed here and again in the plan you approve before patching; on the $99 tier it is included.

4. Refunds

If a patch cannot be completed or verified, or we cannot restore your pre-patch state, the engagement fee for that server is refunded in full — 100%.

5. Your responsibilities

Keep your own backups independent of ours. Our snapshots are a patching safety net with the retention stated in your plan (72 hours on Patch, extended on Patch + Rollback), not a backup service.

6. Liability

To the maximum extent permitted by law, our aggregate liability for an engagement is limited to the fees you paid for that engagement. We are not liable for indirect or consequential damages.

7. Law

These terms are governed by the laws of the State of New York.

Not affiliated with the PHP Group. PHP is a trademark of the PHP Group.

8. Free scan — what it does, and opting out

The free external scan sends read-only HTTP requests to the address submitted: it reads response headers and checks a few well-known paths (for example, whether a phpinfo page is publicly exposed). It never attempts to exploit a vulnerability. If you operate a site and want it excluded from scans, write to security@phpatch.com and we will blocklist the domain.

This document is published in English, which is the controlling text.