My site is on shared hosting. Do I need you?
Probably not for the patch itself: most shared hosts patched PHP for customers on 21-22 October. Ask your host which PHP build your account runs and whether it includes the fix, in writing. If they won't confirm, or your site is still on PHP 8.1 or older, that is where we help.
Isn't a web application firewall enough?
No. Cloudflare and the other vendors call their rules a stopgap and say to patch PHP. A firewall buys time; the fix is the patched build or an upgrade.
What do you need from me?
A signed one-page authorisation that names the servers or sites, and temporary access we can revoke afterwards. We never ask for your personal passwords, and we work on staging first where a site has one.
What if the upgrade breaks something?
Every job starts from a rollback point. If anything we changed stops working, we roll back at no charge and fix it before you pay anything more.
Do you certify my site is safe?
No one honestly can. The letter states what we changed, when, how we checked it, and what is outside the check.
Do you work outside the UK?
Not yet. For now we work with UK businesses only; the contract is with Noverquis Ltd, a company registered in England and Wales.