Current situation: PHP2Shell. Two critical PHP vulnerabilities (CVSS 9.2) allow malicious code without login. Patches since 21 October 2026.What to do now →

How PHP SOS works

IT security and server architecture for businesses in Europe. One point of contact, a partner network for specialist tasks.

Why PHP SOS

Made in Germany, specialised for over 25 years

PHP SOS brings together a partner network of IT security experts who have specialised in server and web security for over 25 years. We work from Germany, remotely and under European data protection law.

PHP SOS is an offering of ARBITRAGE SALES LTD., Max-Planck-Str. 38, 50858 Köln.

One point of contact for the entire incident

In an emergency, it does not help to coordinate three service providers. We take over the situation from the first message: patch, check, cleanup, hardening, report.

For specialist tasks such as court-proof forensics or penetration tests, we bring in specialised partners. You keep one point of contact and one report.

Principles

  • Remote first: we need access, not a journey.
  • Secure first, then change: traces are preserved.
  • Document instead of claim: every step is documented.
  • No guarantees that nobody can keep. Instead, a traceable conclusion.
  • Legal questions are clarified by data protection officers and lawyers. We supply the technology for it.

Process

  1. Assess the situation

    System, version, observation, responsibilities.

  2. Secure and close

    Preserve evidence, patch, document the restart.

  3. Check and clean up

    Files, database, accounts, logs.

  4. Harden and report

    Configuration, monitoring, report.

Immediate contact

Every hour counts. Write to us now.

Briefly describe your system, PHP version and observation. We will get back to you, clarify the situation and work remotely until the incident is closed and documented.

Immediate help