Free exposure checker

A clearer view of
your PHP version.

Compare a supplied PHP release against maintained, sourced advisory and support data. No account or contact details are required to use the checker.

Free PHP exposure review

Is Your PHP Environment Exposed?

Check your PHP version against published security advisories and identify what needs attention. Free, fast, and no account required.

PHP Exposure Checker

A clearer starting point for your next security decision.

Free

Website URL (optional)Optional context only. No request is made to this website. Paths and query strings are discarded.

PHP version (optional)Use the full release number, such as 8.3.36. CMS / application

Hosting and version help

This PHP package is maintained by my host or distribution.

Vendor security backports can change patch status without changing the upstream version. Confirm the exact package revision with your provider.

Don’t know the version? Check the hosting dashboard’s PHP settings or your CMS’s system information. Ask your host for the version serving web requests and its security patch status.

Public URL inspection is not enabled on this deployment. The checker compares the version you supply; it does not inspect, scan, or contact your website.

No account or contact details required. Your inputs are not saved or sent to a server.

Enable JavaScript to compare a PHP version. You can also review official PHP support information and the PHP security advisory.

Managing Multiple PHP Websites?

Get help prioritizing security updates across your WordPress, Joomla, Magento, or custom PHP portfolio.

Discuss an Agency Portfolio Review Explore support for WordPress agencies →

A version comparison is a starting point, not a security certification. CMS indicators, patches, configuration, and compromise status require separate verification.

Official sources: PHP security advisory ↗PHP support lifecycle ↗

Understand the result

Version guidance. Clear boundaries.

The checker does not infer PHP versions from a website address or a CMS selection, and it never treats a missing advisory match as a security certification.

You provide the version

Use the complete release reported by your host or environment. Vendor package suffixes are accepted.

The dataset provides the comparison

Affected ranges, fixed releases, and support dates come from reviewed PHP sources. The review date is shown with each assessment.

Your provider confirms the server

Runtime configuration, vendor backports, and actual patch deployment need separate verification.

Read the PHP Security Guide Prepare an Environment Checklist

A clearer view of your PHP version.