Expel

Listed services and systems

Response status

Connected environments investigated using existing detections

Response information checked

2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Managed detection and response.

Expel reviews customer data using existing web-worker shell and webshell detections. Visibility depends on connected integrations and endpoint agents.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Check PHP-server integrations and agents, add missing coverage, patch PHP and report suspicious behavior to Expel.

Official service URL

• https://expel.com

Source URLs

1. PHP2Shell response and scopehttps://expel.com/blog/php2shell-php-rce-vulnerabilities/Response evidence
2. Operating entityhttps://expel.com/terms-of-use/Service and operation documentation