About Patchwise
An independent PHP emergency patch and security service. We are not affiliated with the PHP project or any hosting or security vendor.
Our approach
The flaw is in PHP on the server. A plugin or WAF cannot fix it; only updating PHP does. We audit, patch, and harden PHP sites after security releases — fixed price, named engineer, written approval.
Your engineer
Every case is assigned to a named PHP security engineer who owns it from start to finish. You get a real reply address and a real person, not a queue or a ticket number.
What we never do
- We never say "100% secure" — security is ongoing.
- We never ask for passwords by email or chat.
- We never scan a site without the owner's written consent.
How we work
- We audit your PHP version and server configuration against the latest security releases.
- We patch and harden PHP on your server with written approval at every step.
- We back up before touching anything, and test after every change.
- You receive a written report of everything we found, changed, and recommend.