Proof of Patch Book a patch

PHP patched in 24 hours. Fixed price. Signed proof.

For servers your host doesn't patch, stores still on end-of-life PHP, and agencies with a fleet to clear this week. You get the fix and a letter that shows exactly what was done.

UK businesses · pay by card · rollback if anything we change breaks

Sample letter · illustrative values

Proof of Patch · Patch verification

Client
Example Agency Ltd, for client site shop.example.co.uk
Server
web-01 · Ubuntu 22.04 · PHP-FPM
Before
PHP 8.1.2-1ubuntu2.27
After
PHP 8.1.2-1ubuntu2.28 (vendor backport)
Patched
22 Oct 2026 · 14:05 UTC
Checked
Service restarted, version confirmed on the running process, checkout and contact form tested
Limits
Covers the PHP runtime on this server only; not a penetration test or a guarantee of security

Signed for Noverquis Ltd

4 Nov 2026UK Cyber EssentialsHigh and critical fixes are due within 14 days of release.
~21 Nov 2026PCI DSSCritical patches within one month; scans fail unsupported software.
31 Dec 2026PHP 8.2 end of lifeSites 'fixed' onto 8.2 need moving again in ten weeks.

Prices

Fixed prices, paid upfront by card. If we can't do the job once we've seen the server, you get a full refund.

Server patch + signed verification letter

VPS, dedicated, cloud or Docker hosts where you, not your host, manage PHP.

  • PHP moved to a fixed release or a vendor-backported build
  • Before/after versions and timestamps recorded
  • Service restarts checked, site and forms smoke-tested
  • Signed evidence letter for your client, board or insurer

£345 per server

within 24 h of access

Book & pay

Online-store upgrade before the PCI deadline

WooCommerce, Magento or PrestaShop stores still on PHP 8.1 or older.

  • Staging copy first, compatibility report on plugins and theme
  • Upgrade to PHP 8.3 or 8.4 with a rollback point
  • Checkout tested end to end after the switch
  • Evidence letter you can attach to your PCI paperwork

£449 per store

within 2 working days

Book & pay

Agency bench, white-label

Agencies and freelancers with client fleets and no spare hands this week.

  • Patch + verify per server, or upgrade per site
  • Your brand on the evidence letter, our name nowhere
  • One spreadsheet back: every site, version, status
  • Minimum 3 jobs; same-day start for booked batches

£149 per server

£199 per site upgrade

batches of 3+

Book & pay

Stuck on PHP 5.x-8.1 with code that won't move this month? Send us the stack and we'll quote a contain, bridge or upgrade plan within 24 hours.

For agencies

Your clients want an answer this week, and your team can't do forty servers on top of normal work. We take batches under your name: you send the list, we patch and verify, you get one spreadsheet and a letter per client on your letterhead.

Nothing reaches your clients from us, and our name appears nowhere.

  1. Send the list. Sites, hosts, who controls PHP on each.
  2. We triage in 24 hours. Host-managed sites get a ready-to-send host question; the rest get a fixed quote.
  3. We patch in batches. £149 per server, £199 per site upgrade.
  4. You get the evidence. One sheet, one letter per client, ready to forward.

How it works

  1. 1

    Scope

    A 15-minute call or email to agree what's in scope and who controls PHP.

  2. 2

    Authorise

    You sign a one-page authorisation and give temporary access we hand back after.

  3. 3

    Patch & verify

    Rollback point first, staging where it exists, then the fix, then checks on the live service.

  4. 4

    Evidence

    A signed letter with before and after versions, timestamps, method and limits.

We don't scan, test or touch any system without that signed authorisation.

Questions

My site is on shared hosting. Do I need you?

Probably not for the patch itself: most shared hosts patched PHP for customers on 21-22 October. Ask your host which PHP build your account runs and whether it includes the fix, in writing. If they won't confirm, or your site is still on PHP 8.1 or older, that is where we help.

Isn't a web application firewall enough?

No. Cloudflare and the other vendors call their rules a stopgap and say to patch PHP. A firewall buys time; the fix is the patched build or an upgrade.

What do you need from me?

A signed one-page authorisation that names the servers or sites, and temporary access we can revoke afterwards. We never ask for your personal passwords, and we work on staging first where a site has one.

What if the upgrade breaks something?

Every job starts from a rollback point. If anything we changed stops working, we roll back at no charge and fix it before you pay anything more.

Do you certify my site is safe?

No one honestly can. The letter states what we changed, when, how we checked it, and what is outside the check.

Do you work outside the UK?

Not yet. For now we work with UK businesses only; the contract is with Noverquis Ltd, a company registered in England and Wales.

Need it done this week?

Email hello@proofofpatch.com with your stack, or pick a fixed price above.