Most small sites run on PHP, and most owners cannot track every security fix the way an attacker can. Site Shield does it for them: an annual security review, and fast patching the moment a vulnerability is disclosed. From $100 a year per site, with faster service and bigger fixes priced on top. A real person sets you up on a short call, included, so you never do the technical part alone.
WHY NOW
PHP2Shell put every PHP site on the clock.
On October 21, 2026, PHP shipped an emergency fix for two critical flaws, CVE-2026-109618 and CVE-2026-109619, together called PHP2Shell. Both let an attacker run code on the server, and PHP said every installation serving web requests is at risk until it is patched. Exploitation is already being seen. If your site runs PHP, patching is not optional, and it is not a one-time job: the next disclosure is coming.
WHAT THE BASE PLAN COVERS
The work, done for you.
The base plan is a guarantee, not a dashboard you have to watch. For $100 a year per site, this is what we do.
01
Annual security review
One full review per site every year: core, plugins, themes and packages checked against known vulnerabilities.
02
Patching on disclosure
When a vulnerability like PHP2Shell is disclosed, we patch covered sites as soon as it is practical, so you do not have to track it yourself.
03
Tested updates
Updates are applied to a copy first and confirmed working before they touch the live site.
04
Backup before every change
A full backup is taken before any change and kept off-site, so a site can be restored if an update goes wrong.
05
Vulnerability and malware scan
Each site is scanned for known vulnerabilities and malware signatures, so problems are caught early.
06
A plain report
One short report per cycle: what was updated, what was found, what was fixed, and the current risk level.
PRICING
One floor price. Pay more only for more.
The $100 base is the floor. Need it faster, or need a bigger fix? Those are priced on top, and we will try to beat any competing written quote.
BASE · $100 / YEAR
The guarantee.
An annual review plus patching the moment a disclosure lands. The floor that keeps a site covered.
PRIORITY · PAID UPLIFT
Jump the queue.
A faster response time on any request, for owners who cannot wait in the standard queue. Priority changes speed, not scope.
PROJECT · QUOTED PER JOB
Bigger fixes.
Refactoring, migrations and rebuilds beyond routine care, quoted per job in advance. Bring a competing written quote and we will try to beat it.
HOW WE WORK
Access is earned, changes are reversible.
A low price and real access to your site only works with hard rules. These are ours.
A PERSON SETS YOU UP
A real person walks you through setup on a short call, included at no extra cost. You never do the technical part alone.
AUTHORIZED ACCESS ONLY
We access a site only after the owner enrolls it and grants access. We never probe a site we were not hired to protect.
BACKUP, THEN TEST, THEN LIVE
Every change is backed up, tested on a copy, and rolled back from the backup if it breaks the live site.
REVIEWED, NOT SOLO
Every change is recorded and reviewed before it ships. The system that makes a change is not the one that signs it off.
NO FALSE ALARMS
We do not tell a prospect their site is exposed. The risk is a public fact about PHP; the offer is help with it, at a fixed price.
ONE SITE OR A HUNDRED
Pay once. A person sets you up. You are covered.
You pay $100 for the year, and a real person contacts you to schedule a short setup call, then gets your site covered with you on the line. Nothing is touched until you grant access.
Book a call →