Skip to content
Intuist

FREE CHECK

FREE · NO SIGN-UP · READ-ONLY

Is your website exposed?

PHP2Shell, two flaws published on 21 October 2026, lets anyone take over a PHP website without logging in. Enter your domain: we read what your home page tells every browser and say, in plain words, whether your site looks exposed, and which flaws on CISA's list of exploited flaws name software it appears to run.

01 · THE CHECK

Your domain, one check.

The check takes a few seconds. The full report opens once you prove the site is yours with a DNS record or a file.

We open your home page the way a browser does and read only what it sends back. Nothing else is sent to your site, and we never try an attack.