Detect → Instant Shield → Patch → Shield
A fixed playbook, executed in order. Nothing moves without a human approving the change — and everything is reversible.
Find the attacker's trail
Read-only audit of the server: unpatched PHP versions, suspicious entries, unexpected cron jobs, renamed shells and upstream blocklists. Report only — no changes, no downtime, no scope creep.
Stop the bleeding within the hour
Stopgap mitigation while the trail is confirmed: block the malicious path, revoke compromised credentials, freeze at-risk entry points. A shield buys the hour for a safe patch — it is never a patch itself.
Fix the root cause
Pinned sury/ESM PHP upgrades staged one at a time, each smoke-tested against your app before the cut, with rollback staged before anything is applied.
Prove it, then keep it proved
Immutable off-site backups, IOC evidence pack and a plain-English fix report — so you can show your bank, insurer or auditor exactly what changed. Optional monthly Shield keeps the watch running.
Fixed scope. Fixed price. No "care plan".
Pay by card through the plan you choose. Every patch leaves an evidence pack and a restore-verified backup behind.
Emergency PHP Patch
£300 / one-off
Active incident remediation
- Detect: read-only audit of the attacker's trail
- Instant Shield: stopgap mitigation within the first hour
- Root cause patched: pinned sury/ESM PHP upgrade, staged and smoke-tested
- Restore-verified backup before any change is applied
- Plain-English fix report + IOC evidence pack
Managed Shield
£79 / month
Ongoing PHP watch
- Monthly patch-status check against the live fix tracker
- 48-hour post-patch watch on every change
- IOC sweeps for known PHP exploit families
- Human-approved changes only — never silent upgrades
- Cancel any time; no lock-in
IOC forensic triage is available as an add-on where the trail supports it — raise it on the intake.
Describe what you're seeing. We reply within the hour.
Your report goes to a signed intake that pages the on-call engineer directly — it is not stored or resold anywhere.
Address
66 Hatton Garden, London EC1N 8LE, UK
Phone
+44 2082010490
info@wordaloud.com