php2shell Scanner
Enter a domain, server, or IP. We fingerprint the PHP, Apache/nginx, and WordPress versions it exposes and tell you whether it looks exposed to php2shell (CVE-2026-109618 / CVE-2026-109619).
Run the scan →Free security tools
Fast, free checks from the team building agentic AI that finds and fixes security issues. Passive by design: we read only what your server already exposes, send no exploit payloads, and never store your results. When you want the full picture, AutoScan tests your whole external attack surface.
Enter a domain, server, or IP. We fingerprint the PHP, Apache/nginx, and WordPress versions it exposes and tell you whether it looks exposed to php2shell (CVE-2026-109618 / CVE-2026-109619).
Run the scan →Grade your HTTP security headers: HSTS, CSP, X-Frame-Options, and more, with copy-paste fixes.
Check certificate validity, protocol versions, and weak cipher configurations in seconds.
These are the free version. AutoScan is the full one.
Continuous external attack-surface testing with validated findings and AI-suggested fixes, not just a banner check.