PHP Vulnerability Responses by Company

Cyber Armor Ltd.

Global cloud / infrastructure
Aliases / services
ARMO / Cyber Armor LTD / CyberArmor / Kubescape / ARMO Platform / armosec.io / Cyber Armor Ltd.
Official website
https://www.armosec.io
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

ARMO Platform (PHP2Shell detection)

Response status
Detection available
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Cloud and container runtime protection.

The 22 October notice adds two default rules: Critical for suspicious PHP-worker child processes and Low for suspect HTTP requests. Customers enabling response can pair the Critical rule with process termination.

Scope: Detection and response capabilities do not establish that every customer PHP deployment is patched or uncompromised.

What users should do

Review runtime detections and SBOMs, update affected PHP, and rebuild images.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.armosec.io/blog/php2shell-php-rce-detection-prevention/Response evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments