How it works

Detect → Instant Shield → Patch → Shield

A fixed playbook, executed in order. Nothing moves without a human approving the change — and everything is reversible.

01 · Detect

Find the attacker's trail

Read-only audit of the server: unpatched PHP versions, suspicious entries, unexpected cron jobs, renamed shells and upstream blocklists. Report only — no changes, no downtime, no scope creep.

02 · Instant Shield

Stop the bleeding within the hour

Stopgap mitigation while the trail is confirmed: block the malicious path, revoke compromised credentials, freeze at-risk entry points. A shield buys the hour for a safe patch — it is never a patch itself.

03 · Patch

Fix the root cause

Pinned sury/ESM PHP upgrades staged one at a time, each smoke-tested against your app before the cut, with rollback staged before anything is applied.

04 · Shield

Prove it, then keep it proved

Immutable off-site backups, IOC evidence pack and a plain-English fix report — so you can show your bank, insurer or auditor exactly what changed. Optional monthly Shield keeps the watch running.

Pricing

Fixed scope. Fixed price. No "care plan".

Pay by card through the plan you choose. Every patch leaves an evidence pack and a restore-verified backup behind.

Emergency PHP Patch


£300 / one-off

Active incident remediation

  • Detect: read-only audit of the attacker's trail
  • Instant Shield: stopgap mitigation within the first hour
  • Root cause patched: pinned sury/ESM PHP upgrade, staged and smoke-tested
  • Restore-verified backup before any change is applied
  • Plain-English fix report + IOC evidence pack
Patch my server

Managed Shield


£79 / month

Ongoing PHP watch

  • Monthly patch-status check against the live fix tracker
  • 48-hour post-patch watch on every change
  • IOC sweeps for known PHP exploit families
  • Human-approved changes only — never silent upgrades
  • Cancel any time; no lock-in
Start Shield

IOC forensic triage is available as an add-on where the trail supports it — raise it on the intake.

Contact

Describe what you're seeing. We reply within the hour.

Your report goes to a signed intake that pages the on-call engineer directly — it is not stored or resold anywhere.

Address

66 Hatton Garden, London EC1N 8LE, UK


Phone

+44 2082010490


Email

info@wordaloud.com