Jonny Pelter
Partner, CyPro
Jonny is a Founding Partner at CyPro and executive group level CISO who has worked closely with the British intelligence agencies NCSC and GCHQ.
- CIPM
- CIPP/E
- CISSP
- CISM
- CRISC
- ISO27001
- Prince2
- MSc
- BSc
About this site
Who runs PHP Vulnerability
PHP Vulnerability is run by CyPro Ltd, the London cyber security consultancy. It exists to give anyone running PHP a clear, sourced answer to two questions when a serious flaw is announced: am I affected, and what do I do now?
How it works
How the pages are kept accurate
Primary sources only
Version numbers, dates, scores and mitigations come from the PHP project's releases and advisories, the NCSC and CISA. Press coverage helps us spot what to check; it is never the source of a fact on this site.
Dated, every page
Each page shows the date it was last checked against those sources. When a new advisory lands, the affected pages are updated and re-dated, and the home page board moves on.
Disagreements shown, not hidden
Different organisations score the same vulnerability differently. Where they do, we name the scorer rather than picking the most dramatic number.
Nothing checked without permission
The risk calculator works only from your answers, in your browser. This site never probes or tests anyone's website.
Spotted something out of date or wrong? Tell us and we will check it against the source and correct the page.
Accountable for this site
The CyPro partners behind it
CyPro's founding partners answer for what this site says. Both are experienced CISOs who advise UK organisations on exactly the kind of decision a critical vulnerability forces.
Rob McBride
Partner, CyPro
Rob is a Founding Partner at CyPro and a highly experienced CISO. Beginning his career with a successful tenure at Deloitte, Rob has since amassed a wealth of experience, notably serving as a cyber security advisor to the UK government and spearheading cloud security transformations for several global banks.
- CISSP
- ACA Chartered Accountant
- MPhil
- BSc
- SOC 2
- ISO 27001
What this site does not do
PHP Vulnerability sells nothing. If you want help finding every PHP server your organisation runs, that is a vulnerability scanning job, and CyPro's Managed Vulnerability Scanning service covers it.
The rest of CyPro
For CyPro's story, the wider team and the full range of services, including incident response, visit the main site.
Visit cypro.co.uk
Know your exposure
Find every PHP server you run
Patching the server you know about is the easy part. A vulnerability scan finds the forgotten staging site, the old microsite and the appliance with PHP inside, then tells you which ones are still exposed.