Schools and hospitals offline. Is your website safe?

This check cannot tell you: we only examine whether the site uses PHP and whether the version contains the fix. Belgium's Centre for Cybersecurity (CCB) reported no confirmed successful Belgian attacks, while Cloudflare already saw initial attempts. Update today.

Not necessarily. Most servers hide their version, which is good practice. It only means outsiders cannot see it. Your hosting provider or developer can confirm: ask them.

It helps. Cloudflare deployed rules blocking known attack patterns. Attackers seek workarounds, however, and a firewall does not cover every route to your server. Patching remains the only complete solution.

The platform manages the server for you and your site usually does not have its own PHP installation. The check generally shows 'No PHP detected'. Have a separate shop, blog or customer portal checked separately.

No. We request your homepage once, like an ordinary visitor, and read what the server reveals publicly. We never attempt an attack: that would be breaking into another person's server.

Another vulnerability will come, and you will want to hear about it promptly. With an account we check your site weekly for security, Google visibility and more, and notify you when something changes. The first 50 users get one year free, with up to 3 websites per account. After that, you can choose a plan or stop; nothing is charged automatically.