PHP Vulnerability Responses by Company

Evalify Pty Ltd

Global cloud / infrastructure
Aliases / services
Nullify / Nullify Holdings Pty Ltd / Evalify Pty Ltd / nullify.ai
Official website
https://www.nullify.ai/
Sources identifying the operating company

The official legal page distinguishes service operator Evalify Pty Ltd (ABN 32 664 474 980) from data controller Nullify Holdings Pty Ltd (ABN 18 664 463 950).

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Nullify PHP2Shell investigation and remediation assistance

Response status
Customer environments investigated; fixes prepared for customer deployment
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Security service inspecting customer code and containers.

Nullify’s October 22 article describes checking containers, Dockerfiles and provisioning definitions across about 3,700 customer repositories, identifying affected or potentially affected environments and sending owners concrete fixes.

Scope: The article reports fixes prepared and delivered, not deployment by every customer. It is not a notice that Nullify’s own service was compromised or that remediation of that service is complete.

What users should do

Review, apply and redeploy the proposed changes. Rebuild floating image tags, verify distribution backports or migration from unsupported versions, and review historical logs.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.nullify.ai/blog/php2shell-runtime-vulnerabilityResponse evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments