LAMP Health & Security Review
Know exactly what state your system is in.
Most owners of a long-running PHP application share the same quiet worry: nobody currently on the team knows exactly what state the system is in. The review answers that question with evidence.
What we examine
- Version exposure — PHP, MySQL, OS, and Apache versions against their end-of-life dates; which CVEs apply to what you are actually running.
- Dependency risk — Composer packages (or the vendored libraries that predate Composer), pinned extensions, and abandoned dependencies with known advisories.
- Security posture — TLS configuration and certificate management, admin surface exposure, credential handling, file-permission and upload-handling patterns, SQL-injection-prone query construction.
- Backups — whether they run, whether they cover files as well as the database, and above all whether they restore. If you permit it, we prove it with a test restore.
- Performance baseline — slow query log analysis, OPcache health, worker sizing, and p95 latency on your most important routes, so later work can be measured against today.
What you receive
A written findings report, ordered by risk and effort: what to fix this week, what to schedule this quarter, and what is fine to leave alone. Each finding names the affected component, the concrete exposure, and the remediation. It is written to be actionable by any competent engineer — hiring us for the follow-on work is an option, never a requirement.
How it runs
The review is a short, bounded engagement billed hourly. We need read access to the codebase and servers (or a recent snapshot), an hour with whoever knows the system best, and a few days. You get the report and a walkthrough call.
Tell us about your stack to get started.