Assessment terms

1. What the checker does

The Espria PHP Security Checker (“the Checker”) performs a free, passive, initial assessment of a website address you submit. It makes a small number of ordinary read-only web requests to the website’s public front page, in the same way a web browser would, and reviews publicly visible information for indications of PHP and, where disclosed, the PHP version. It compares any disclosed or user-supplied version with the official PHP security advisory of 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

2. What it does not do

The Checker does not perform penetration testing, exploit attempts, vulnerability scanning of files or directories, port scanning or any intrusive activity. It cannot see private server configuration, vendor security backports, applications behind a login, other hostnames, or evidence of compromise.

3. No guarantee of security

Results are an initial assessment only. A result is never confirmation that a website is secure, patched, unaffected, vulnerable or compromised. You remain responsible for verifying the PHP version serving your website and for applying updates. Espria accepts no liability for decisions made solely on the basis of a Checker result.

4. Authorisation

You may only submit website addresses that you own, manage or have explicit permission to assess. By ticking the acknowledgement you confirm this. Espria records the acknowledgement and the version of these terms. The Checker’s technical safeguards apply regardless of the acknowledgement, and the acknowledgement does not authorise any intrusive testing. Misuse may result in access being withdrawn.

5. Fair use

The Checker is rate-limited per visitor and per website. Automated or bulk use is not permitted.

6. Personal data

Running a check does not require any personal details. If you choose to contact Espria, your details are used as described in the privacy notice.

7. Changes

Espria may update these terms and the advisory information (for example when new fixed versions are published). The version in force at the time of your check is recorded with it.

Espria Limited, Thundridge Business Park, Thundridge, Herts, SG12 0SS. These terms supplement Espria’s general website terms and conditions.