Skip to content
Part of Host Dada – UK web hosting & domains
Host DadaSecurity Checker

PHP security releases, 21 October 2026: critical fixes for PHP 8.2 to 8.5. What it means for your website

Free website security checker

Is Your Website Secure and Up to Date?

Find out what technology your website uses, check for common security configuration issues, and discover whether your WordPress website needs further attention.

No account required. No technical knowledge needed.

  • No account required
  • Passive & non-intrusive
  • Results in seconds
We check WordPress & PHP, HTTPS, certificates and security headers

What we check

A quick, honest look at your website from the outside

Four areas that commonly need attention on small business websites, explained without the jargon.

  • Website technology

    Whether your site appears to run on WordPress, Joomla, Drupal or another platform, and whether there's public evidence of PHP.

  • PHP version

    If your server reveals its PHP version, we compare it with PHP's official support dates and security advisories. If not, we show you how to check.

  • HTTPS & certificate

    Whether your site uses a secure connection, redirects visitors to it, and has a valid certificate that isn't about to expire.

  • Security headers

    Browser security settings such as HSTS, Content Security Policy and clickjacking protection, plus software details your site gives away.

Already know your PHP version?

Check it against official PHP support data

Enter the version from WordPress Site Health or your hosting control panel. We'll tell you whether it's still supported and whether newer releases contain security fixes, without pretending a version number tells the whole story.

Don't know it? Find your PHP version in WordPress.

Safe and transparent

Built to inform you, not to alarm you

This is a preliminary external assessment, not a full vulnerability scan or security certification.

What the check does

  • Makes a few ordinary requests to your home page, like a visitor's browser
  • Reads publicly visible headers, certificate details and page markup
  • Explains every result in plain English, with how sure we are
  • Tells you honestly when something can't be checked from outside

What it never does

  • Log in, guess passwords or try to break in
  • Test for vulnerabilities or send attack traffic
  • Crawl your site or fetch other pages and files
  • Give you a made-up "security score"

Read exactly how the check works

Security alert · 21 October 2026Critical PHP fixes: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35PHP has fixed two critical vulnerabilities. Here's what it means for WordPress and other PHP websites, and what to ask your host.Read the alert

Who's behind this tool

Built by Host Dada, a UK hosting and software development provider

We built this checker because many business owners are told to "update PHP" or "check your security" without any way to see where they stand. It's free to use, with no account and no obligation.

About Host Dada

  • UK hosting provider

    Host Dada provides web hosting, WordPress hosting, domains, business email and SSL for UK businesses.

  • Developer-led

    We started in 2009 supporting our own web design and development clients, and still build websites and software today.

  • Recognised partners

    Host Dada is a Nominet Accredited Registrar and a Microsoft Partner.

  • Registered in England

    Host Dada is a company registered in England under company number 14514477.

Questions

Frequently asked questions

Is the website security checker free?
Yes. There's no account, no email address required and no limit on reading your results.
Is it safe to run on my website?
Yes. The check makes a handful of normal requests to your home page, the same as a visitor's browser. It doesn't log in, crawl your site or attempt any kind of attack.
Why can't you see my PHP version?
For security reasons, many hosting providers hide their PHP version. This is normal and does not automatically indicate a problem. You can find it yourself in a minute: here's how in WordPress.
If everything looks good, is my website secure?
Not necessarily. We can only see what any visitor can see. Outdated plugins, weak passwords, server settings and many other risks aren't visible from outside. Treat the results as a helpful starting point.
Do you store the websites I check?
Results are kept briefly in memory (up to an hour) so you can choose to send them with an enquiry, then discarded. Our logs record the domain checked and a scrambled version of your IP address to prevent abuse. See the privacy policy.
Do I have to be a Host Dada customer?
No. The checker works for any public website, wherever it's hosted. If you'd like help afterwards, you can ask us, but there's no obligation.

Guides for website owners

Ready to check your website?

Free, passive and takes a few seconds. No account needed.

Check My Website — Free