Upgrade your PHP.
Keep your business moving.
Security updates should come with a plan. We review your website or application, test compatibility and manage the PHP upgrade, with a named senior engineer accountable for the work.
Free initial assessment · Quote before work begins · Response within 1 to 2 working daysRunning PHP? Check your patch status.
The PHP project released fixes for two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619, widely reported as PHP2Shell). Ask your hosting provider to confirm the patch status of your web runtime. An application update alone, such as a WordPress update, may not update PHP.
Fixed releases: 8.5.12 · 8.4.27 · 8.3.36 · 8.2.35. PHP 8.1 and older receive no official releases, and PHP 8.2 security support ends on 31 December 2026. Later advisories and vendor backports also need checking for your environment.
Read the PHP security advisoryReviewed 28 October 2026. Version guidance must be rechecked before any upgrade.A version change is only part of the job
For business websites, WordPress installations and bespoke PHP applications. We scope the work around your code, hosting and the journeys your customers depend on.
Know what needs updating
Review the runtime, application, dependencies and hosting responsibilities. Identify compatibility issues before they reach your customers.
Test the important journeys
Prepare a staging environment, check backups and test sign-in, forms, payments and integrations relevant to your system.
Leave a clear record
Agree the deployment window and recovery plan, verify the live runtime and document what changed and what still needs attention.
From uncertainty to a tested upgrade
Review and agree
We establish the risks, scope and access needed, then confirm cost and scheduling before work begins. Unsupported code may need a separate compatibility project.
Prepare and validate
We test against a patched target version and agree acceptance checks. Backup restoration and recovery steps are part of the deployment plan.
Deploy and verify
We check the live application and agreed customer journeys after deployment, then give you an upgrade record and recommendations.
Give your environment an owner
A one-off upgrade addresses the immediate work. Ongoing maintenance gives future updates, monitoring and backups a named owner.
Keep PHP supported
Plan runtime and dependency updates, test changes and track support deadlines. Scope and response times are agreed in writing.
Care for the whole system
Agree responsibility for hosting, monitoring, restore checks and application fixes, with a clear record of the work each month.
Choose the right next step
If the current platform limits your business, we can scope a migration, including a non-PHP stack. Security and performance depend on the design and operation of any stack.
Before you upgrade
Can my hosting provider update PHP?
Often, yes. Ask who manages the runtime and whether a patched version has already been deployed. We help where you need compatibility work, application testing or coordination across your hosting and development teams.
Will upgrading PHP break my website?
Older code, extensions and plugins can be incompatible with newer PHP versions. We assess and test those dependencies before deployment. Any downtime and recovery arrangements are agreed for your environment.
Do I need to move away from PHP?
No. Supported PHP can be a sound choice. A migration should follow your product needs, maintenance costs and measured performance requirements. Changing language alone does not make a system secure.
What if my site may already be compromised?
Tell us before upgrade work begins. Patching does not remove an existing compromise. Incident investigation and recovery require a separate scope and may need a specialist response team.
How much does a PHP upgrade cost?
The scope depends on your current version, code compatibility, hosting access and required testing. The initial assessment is free. We then provide a quote for the proposed work. Ongoing support and migration are scoped separately.
Tell us what you are running
Share what you know for a free initial assessment. We will respond within 1 to 2 working days and provide a quote after the assessment.
Do not include passwords, access tokens or customer data. Secure access is arranged separately.