Bulk report: check all your sites at once

Paste your list of websites. We check every site for free and show how many look vulnerable to php2shell. Credits pay for the assistant that reads a hidden version and writes what to fix. No account.

  1. Paste your listOne website per line, up to 1000.
  2. See the totals, freeHow many look vulnerable, need a vendor check, hide the version or are fixed.
  3. Fix what mattersCredits pay for the assistant that writes the fix plan.

No email, no payment. You see the totals in a few minutes and decide then. See a sample report.

The two paid products are 10 credits for $4.90 and 40 credits for $14. One credit is one assistant reply. Reports that were already paid keep their rechecks and alerts.

One-time payment through Waffo (card, Apple Pay, Google Pay), no subscription. Prices in USD; tax may be added at checkout. See the terms.

Find my report

FAQ

What is free, and what do I pay for?

Checking the list is free: you see how many sites look vulnerable, need a vendor check, hide their version or are fixed. Credits pay for the assistant that reads server output and writes a fix plan. Reports already paid keep the plan you bought.

What does the bulk report check?

Exactly what the free checker does, for every site on your list: one ordinary GET request to the homepage, reading the PHP version the site reports. Nothing is scanned, attacked or uploaded.

What if a site hides its PHP version?

It is listed as hidden. In every plan you can paste the output of our read-only self-check script from that server; the AI reads it and our rules give those sites a verdict.

What happens if nothing can be checked?

You cannot buy a report for a list where no site could be reached. If a paid report is checked again from scratch and not a single site can be reached, we refund the order.

How long do you keep my list?

Free previews are deleted after 3 days. Paid reports are kept until the link expires (30 days for Starter, 60 for Team, 120 for Agency), then the list and all results are deleted.

I lost my report link.

Enter the email address you paid with under "Find my report" on this page; we email the links of all its reports.