PHP Vulnerability Responses by Company

Alloy Software, Inc.

Global cloud / infrastructure
Aliases / services
Alloy Software / Alloy Software Inc. / Alloy Navigator / Alloy Scan / alloysoftware.com / Alloy Software, Inc.
Official website
https://www.alloysoftware.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Alloy Navigator: cloud and on-premises

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

IT service and asset management software.

Navigator's application architecture does not use PHP; the notice covers both cloud and on-premises deployments.

Scope: Navigator server and web components. Reported internal-server patching concerns a different environment.

What users should do

No Navigator-specific patch or configuration change is needed. Review other PHP software on the same server separately.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.alloysoftware.com/blog/alloy-software-products-unaffected-by-php2shell-vulnerabilities/Response evidence
  2. https://www.alloysoftware.com/legal/https://www.alloysoftware.com/legal/Service and operation documentation
  3. https://www.alloysoftware.com/resources/eula/https://www.alloysoftware.com/resources/eula/Service and operation documentation

AlloyScan: cloud and on-premises

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

AlloyScan does not use PHP and is unaffected in both cloud and on-premises deployments.

Scope: AlloyScan only; the assessment does not cover independently deployed PHP applications.

What users should do

No product-specific patch or configuration change is needed. Review any separate PHP systems.

Source URLs

  1. PHP2Shell response and scopehttps://www.alloysoftware.com/blog/alloy-software-products-unaffected-by-php2shell-vulnerabilities/Response evidence
  2. https://www.alloysoftware.com/legal/https://www.alloysoftware.com/legal/Service and operation documentation
  3. https://www.alloysoftware.com/resources/eula/https://www.alloysoftware.com/resources/eula/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice

Comments