01 ↗
Enter your website
We send an ordinary request to your URL and inspect its public HTTP response headers.
FREE PHP VERSION CHECK
Know your PHP version.
Know your next step.
Check what your website reveals about PHP. See its support status, review the security baseline, and find out what to do next.
✓ Free single-site checks✓ No signup✓ No exploit attempts
Looking after more than one website?
Check your whole portfolio in bulk
</>YOUR PHP CHECK, IN SECONDS
Try a version:
A little clarity for your stack.
Your result will show up here, along with the
evidence
and a practical next step.
Hidden PHP versions are normal.
A public check can’t see through your server settings.
A SMALL CHECK. A CLEARER PICTURE.
From website to next step.
No server passwords. No downloads.
Just the information your
website makes public.
02 </>
Read the evidence
If PHP advertises a version, see the exact header. If it’s hidden or blocked, we say so.
03 ✓
Take the right next step
Compare the version with official support dates and security releases, or verify it on your server.
THE UPSTREAM BASELINE
Is your PHP branch still supported?
| PHP branch | October security release | Support status | Security support ends |
|---|---|---|---|
| PHP 8.5 | 8.5.12 | Active support | 31 Dec 2029 |
| PHP 8.4 | 8.4.27 | Active support | 31 Dec 2028 |
| PHP 8.3 | 8.3.36 | Security fixes only | 31 Dec 2027 |
| PHP 8.2 | 8.2.35 | Security fixes only | 31 Dec 2026 |
Release data reviewed October 23, 2026. The listed versions fix CVE-2026-109618 and CVE-2026-109619; they are not a complete security assessment. Vendor packages may include backported fixes.
ONE WEBSITE OR ONE HUNDRED
Free for a quick check.
Built for your whole portfolio.
One-time credit packs. No subscription. One credit checks one unique URL.
For a quick answer.
Free
Check one website at a time.
- Public PHP version detection
- Support and security baseline
- Original response-header evidence
- Manual server-check instructions
10 website checks.
$4.99one time
For your website portfolio.
- 10 checks, across multiple batches
- Paste URLs or import CSV / text
- Background processing & status filters
- CSV reports with original evidence
100 website checks.
$9.99one time
For your website portfolio.
- 100 checks, across multiple batches
- Paste URLs or import CSV / text
- Background processing & status filters
- CSV reports with original evidence
Bulk checks use the same public detection method. Hidden versions remain unknown. One credit is used per submitted unique URL, including hidden, blocked, or unreachable results. Reports are saved for 30 days; unused credits do not expire.
CAN’T SEE YOUR VERSION?
Check the runtime
from the inside.
Many production websites hide PHP headers. That’s expected. Your hosting panel or web runtime can give you the exact version.
Read the step-by-step guide →A FEW GOOD QUESTIONS
Before you check.
Can this check any website’s PHP version?
It can check public HTTP response headers, but it can only identify an exact version if the website exposes one. Hidden headers, a CDN, a firewall, or a non-PHP stack can all produce an unknown result. Use the manual checks above to confirm your own runtime.
Does “meets the baseline” mean my website is secure?
No. It means the reported upstream version meets the fixed-release threshold for the two October 2026 PHP2Shell vulnerabilities. Headers can be stale or changed, and vendor packages may backport fixes. This tool does not exploit vulnerabilities or audit your website.
Why does php -v show a different version?
Your terminal and web server can use different PHP installations. Check the PHP version inside your web hosting panel, WordPress Site Health, or a restricted temporary script served by the same website.
What do I get with bulk checks?
Paste URLs or import a CSV/text file, run up to 100 URLs per batch, filter results, and download a CSV report. Jobs continue in the background. Save your recovery key before paying so you can access your credits and reports on another browser.
Do you keep the websites I check?
Free single-site results are not saved as reports. Bulk URLs and results are stored privately under your access key for 30 days. We keep payment and credit records to operate your balance. See our privacy policy for details.
A healthier portfolio starts with a clear inventory.
Spend less time copying URLs. Get the whole picture in one report.