PHP2Shell · CVE-2026-109618 · CVE-2026-109619

Secure your website for good, not just for this week

Two critical flaws in PHP became public on 21 October 2026, and attacks began within hours. We rebuild your site without PHP and put it on a server run by a hosting partner we recommend. A site without PHP removes this class of flaw. It does not promise that nothing can ever happen.

  • No PHPYour new site has none to attack
  • PartnerServer run by a partner we recommend
  • YoursThe new site is yours

Start here

Tell us about your site

Leave your website address and your email. We reply with a plain assessment and a quote. No access and no password needed.

We use your email only to answer this request. Privacy · Or write to consulting@metatron.marketing

The problem

A PHP update closes one hole, not the next

PHP2Shell was published on 21 October 2026. Attacks started within hours, and some governments took sites offline. WordPress, Drupal, Joomla, Magento and Laravel all run on PHP, so updating the content system alone does not close this hole. Only the PHP update does.

Patching is necessary, and it is also a race that starts again with every new flaw. A site that does not run PHP is out of that race for this class of flaw.

The solution

A site without PHP, on a server run by a hosting partner we recommend

  1. A partner runs the server

    We recommend hosting partners who run the virtual server for you. Operation and upkeep are theirs.

  2. A site without PHP

    We analyse your current site and rebuild it so that it runs without PHP.

  3. Daily hardening

    Every day we update, tighten and check the server. The work runs on our own systems.

  4. You stay in control

    The site and its content are yours. We build it, the partner operates it.

How it works

Three steps

  1. 1

    You send the address

    Only the website address and your email. We reply with an assessment and a quote.

  2. 2

    We analyse and rebuild

    We rebuild the site without PHP, after you accept our quote.

  3. 3

    Your partner runs it

    At go-live the site moves to the server of the hosting partner you choose from our recommendations, who operates it.

Price

Clear prices, one site

All prices are net, plus VAT where it applies. You get a written quote before we start.

  • Analysis and rebuild

    From €1,900 net

    One time. Analysis and rebuild without PHP, priced by effort.

We need access to your current site for the rebuild. We ask for it only after you agree to the quote.

Ask for a quote

Prepared with AI by Metatron Marketing (EU AI Act Art. 50).