Patch Verification & Compromise Review

Last updated: October 23, 2026

Tell us about the server and who needs the answer. We reply by email to set up a short call. Nothing happens on your server without a signed authorization. It covers online stores too; payment-page and skimmer checks aren’t included.

When we reply: within 1 business day.

You’re asking about: Patch Verification & Compromise Review

$590 per server, includes 1 site

+$150 per additional site on that server

capped at $1,200 in extra-site charges per server, every server, however many sites

$472 each additional server in the same order (same per-site price and cap)

$590 per server for an online store: server and PHP runtime patch status plus the standard compromise review. Payment-page and skimmer checks are not included.

Timeline: 1 business day after access

Per-CVE patch status for every PHP runtime on the server: build string, how it runs, package changelog entries citing the CVEs, worker restart time after patching, and the CVE-2026-115560 setting
A compromise review from October 17: PHP2Shell log indicators; processes started by the web server; file and checksum changes; new admin accounts, scheduled tasks and SSH keys
A secrets-exposure assessment listing what to rotate if a vulnerable setup ran unpatched

Full scope and what’s not included

Name

Work email

Company (optional)

Website you want help with (optional)

A domain like example.com, without an IP address or port. We note it for the conversation; we never scan or fetch it.

What do you need?

Country

Anything else? (optional)

Please don’t include passwords, keys or other credentials.

Send me occasional emails about PHP security and Oakshield services. I can unsubscribe at any time.

We use your details to reply to this request. See our privacy policy.