Frequently Asked Questions
How do I use PHP Secure?
PHP Secure is easy to use and requires no specialized knowledge. It’s as simple as clicking the Scan button above and uploading your code. Or easily integrate Git to implement automated checks in your CI/CD pipeline for development, review, and release. Whether you’re a developer or non-technical user, the experience is simple and user-friendly.
You can at any point during the development lifecycle to find bugs and get targeted recommendations to fix them. When PHP Secure completes its scan, you receive a full scan report that you can use to secure your code.
What kind of vulnerabilities can PHP Secure detect?
PHP Secure detects the most common and dangerous types of vulnerability for PHP apps:
- SQL injection vulnerabilities
- Command Injection
- Cross-Site Scripting (XSS) Vulnerabilities
- PHP Serialize Injections
- Remote Code Executions
- Double Escaping
- Directory Traversal
- Regular Expression Denial of Service (ReDos)
Soon you'll also be able to check ports, scan for Server Vulnerabilities, Security Hotspots and much more! Check back soon for more updates.
Do I need to install any software to scan my code?
No, PHP Secure runs fully in your browser. You don't need to install any software on your device.
What languages and platforms does PHP Secure support?
PHP Secure’s scanner is capable of analyzing websites built on PHP, including the Laravel framework, as well as CMS platforms such as WordPress, Drupal, and Joomla.
Will anyone know about my code’s vulnerabilities?
No. Only you can view your vulnerability reports, and you have to be signed in to your account to do so. You can also delete your reports from PHP Secure at any time.
How do you store the code I upload?
PHP Secure guarantees complete privacy and confidentiality of your code and vulnerability reports. Our scanner is fully end-to-end encrypted. After your code is scanned, it is immediately deleted from our servers. To rescan your code, you need to reupload it or specify your Git repository again. This ensures maximum data security.
How much does PHP Secure cost?
PHP Secure is currently completely free, while similar solutions, like the salary of a code security specialist, can cost up to $10,000 a month. PHP Secure’s scanner is the best solution for site owners to secure their code without breaking the bank.
Secure your website and code
PHP Secure supports websites built on PHP, including the Laravel framework, as well as CMS platforms such as WordPress, Drupal, and Joomla.
Automated secure code checks in your workflow
Upload your project files every time you want to check your code. Or easily integrate the scanner into your Git to run auto checks and extend your CI/CD workflow.
Release features faster, ensuring the new code delivered today is clean.

Reduce risk, save budget, boost productivity
- A quick overview of findings and risk ratings
- In-depth descriptions of each vulnerability with explanations about vulnerable parameters and attack vectors
- Actionable and dev-friendly recommendations to patch detected security flaws.
- No credit card required