Engineering · 2026-10-23
Introducing PHP Checker — a free, plain-language security check for your PHP site
Most of the web runs on PHP, and a lot of it runs on versions that are end-of-life or missing months (sometimes years) of security patches. The people who own those sites usually aren't developers — they're running a business, and "is my website secure?" is a question nobody gives them a straight answer to. We built PHP Checker to give that straight answer, for free.
Intro
Most of the web runs on PHP, and a lot of it runs on versions that are end-of-life or missing months (sometimes years) of security patches. The people who own those sites usually aren't developers — they're running a business, and "is my website secure?" is a question nobody gives them a straight answer to. We built PHP Checker to give that straight answer, for free.
What it does
Enter your website, prove you control the domain, and PHP Checker runs a passive check and reports, in plain language:
👉 PHP version & end-of-life status — is your PHP still getting security fixes?
👉 Known CVEs — vulnerabilities published against your detected version.
👉 Security headers & TLS — missing protections and certificate/connection issues.
👉 CMS health — WordPress/Drupal/Joomla detection and whether it's outdated.
👉 Exposed files (opt-in) — publicly readable .env, .git, or phpinfo pages, which are among the most common real-world leaks.
Every finding comes with a severity, a confidence level, and a concrete next step — no security jargon required. For a deeper look, you can download a small, read-only helper that checks your exact PHP configuration and dependency versions right on your server.
Built responsibly
PHP Checker is a self-scan tool: it only checks a domain after you've proven you control it, and its checks are passive by default. We're deliberately honest, too — a version appearing in a vulnerability
database isn't proof you're exploitable, so we tell you what to patch rather than trying to scare you.
Who it's for
Small businesses, agencies, and anyone responsible for a PHP or WordPress site who wants a clear, trustworthy answer without hiring a security consultant for a one-off question.
What's next
This is the first step. We're exploring continuous monitoring — keeping an eye on your site and emailing you, in plain language, only when something new needs attention. If that's interesting to you, watch this space.
About Senbonai
We're a software studio building and securing real products. Beyond free tools like this, we help companies with AI, consultancy, security, and software development. If any of that would help your business, get in touch.
👉 Try PHP Checker free: https://phpchecker.senbonai.se
