PHP Vulnerability Responses by Company

Thorn Technologies LLC

Global cloud / infrastructure
Aliases / services
Thorntech / Thorn Technologies LLC / SFTP Gateway / thorntech.com
Official website
https://thorntech.com
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

SFTP Gateway on AWS, Azure, Google Cloud and Alibaba Cloud

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Cloud SFTP transfer software.

Thorntech states that SFTP Gateway uses no PHP, relying on a Java backend and static web interface, and is not affected by these PHP vulnerabilities.

Scope: Official SFTP Gateway VM and container distributions, not every service of the underlying cloud providers.

What users should do

No SFTP Gateway PHP update is required; assess separately installed or operated PHP independently.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://help.thorntech.com/docs/sftp-gateway-gcp-3.0/gcp-php2shell-not-affected/Response evidence
  2. https://help.thorntech.com/https://help.thorntech.com/Service and operation documentation
  3. Operating entityhttps://thorntech.com/eula/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments