ARMO
- Aliases / services
- ARMO / Cyber Armor LTD / CyberArmor / Kubescape / ARMO Platform / armosec.io
- Official website
- https://www.armosec.io
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Listed services and systems
- Response status
- PHP2Shell rules in the managed ruleset
- Response information checked
- 2026-10-27 Rechecked: 2026-10-27
Cloud and container runtime protection.
ARMO added a Critical rule for suspicious PHP-worker child processes and a Low rule for suspicious HTTP requests. Related events are combined into one incident.
What users should do
Verify managed rules and runtime sensor coverage. Where response is enabled, the Critical rule can trigger process termination. Also rebuild and redeploy updated PHP images.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://www.armosec.io/blog/php2shell-php-rce-detection-prevention/Response evidence
- Operating entityhttps://www.armosec.io/privacy-policy/Service and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments