PHP Vulnerability Responses by Company

Drata

Global cloud / infrastructure
Aliases / services
Drata / Drata Inc. / SafeBase / SafeBase LLC / drata.com
Official website
https://drata.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Customer-facing systems unaffected
Response information checked
2026-10-27 Rechecked: 2026-10-27

Security and compliance management.

Drata and SafeBase production and customer-facing systems do not use PHP. PHP on an isolated, ephemeral internal build service was also patched.

What users should do

No customer update is required. Use the Trust Center or security contact for specific questions.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://trust.drata.com/Response evidence
  2. Operating entityhttps://drata.com/privacyService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments