PHP Vulnerability Responses by Company

Drata

Global cloud / infrastructure
Aliases / services
Drata / Drata Inc. / SafeBase / SafeBase LLC / drata.com
Official website
https://drata.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Drata platform

Response status
Customer-facing environments unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Security and compliance management.

Drata states that its customer-facing and production environments do not use PHP and are unaffected.

Scope: An internal ephemeral build environment was patched as a precaution; the SafeBase statement concerns a separate service.

What users should do

Continue normal use and monitor further notices.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://trust.drata.com/Response evidence
  2. Operating entityhttps://drata.com/privacyService and operation documentation
  3. https://trust.drata.com/?tcuUid=0f99bea0-793f-4c1b-817c-bb61d41985c4https://trust.drata.com/?tcuUid=0f99bea0-793f-4c1b-817c-bb61d41985c4Response evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments