Retool, Inc.
- Aliases / services
- Retool / Retool Inc. / retool.com / Retool, Inc.
- Official website
- https://retool.com/
Sources identifying the operating company
Contracting provider named for Free, Team and Business plans in the standard terms. Check the agreement for a custom Enterprise contract.
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Retool internet-facing and production infrastructure
- Response status
- No PHP; not affected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Platform for building internal applications and workflows.
The 21 October disclosure says public, production and production-connected systems do not use PHP and are unaffected. Third-party vendor checks continue.
Scope: Does not certify independently operated customer PHP systems or third-party services.
What users should do
No Retool-side update is required; check independently operated integrations with their vendors.
Official service URL
Source URLs
- PHP2Shell security disclosurehttps://docs.retool.com/changelog/disclosures/php2shellResponse evidence
- https://docs.retool.com/legal/customer-terms-of-servicehttps://docs.retool.com/legal/customer-terms-of-serviceService and operation documentation
- https://docs.retool.com/changeloghttps://docs.retool.com/changelogService and operation documentation
Related official sources
- PHP2Shell security disclosureOfficial notice
Comments