Bitrise

Global cloud / infrastructure

Aliases / services: Bitrise / Bitrise Limited / Bitrise Inc. / bitrise.io
Official website: https://bitrise.io/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status: No PHP usage; unaffected
Response information checked: 2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Mobile application build and delivery platform.

On October 21, Bitrise reported no PHP usage or impact in its products, services, production components or customer infrastructure. Third-party vendor checks continue.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

No action is required from Bitrise customers.

Official service URL

https://bitrise.io/

Source URLs

PHP2Shell response and scopehttps://security.bitrise.io/Response evidence

Related official sources

PHP2Shell response and scopeOfficial notice
Terms and contracting entityOfficial information directory