PHP2Shell: how do we know we're actually safe?

Two days into PHP2Shell, the question most people ask is not how to patch. It is how to know they are actually safe.

Patching your own servers is the part you control. The harder part is the supply chain: the payroll provider, the web agency, the logistics partner. When they say they have patched, that is often an assumption rather than evidence.

CyberRank.ai shows which vendors are still exposing vulnerable PHP, from a URL alone, with no access and no questionnaires. Knowing where the gaps are is the first step. Where organisations then need help with remediation, and with what that means for ISO 27001, DORA, NIS2 or UU PDP, IISRI® provides direct expert support.

---