PHP Vulnerability Responses by Company

Todyl

Global cloud / infrastructure
Aliases / services
Todyl / Managed SIEM / Janus Search / Todyl MXDR / todyl.com
Official website
https://www.todyl.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

AI-Powered Managed SIEM

Response status
Investigation and response support
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

SIEM, EDR and managed detection and response.

Supports PHP2Shell investigation through retained logs, search and correlation; Janus SIEM Search is a feature.

Scope: Support capability, not confirmation of patches to Todyl infrastructure or customer PHP.

What users should do

Review enabled capabilities and retained logs; coordinate PHP patching separately.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.todyl.com/blog/php2shell-client-data-breach-reportingResponse evidence

Endpoint Security (EDR / NGAV)

Response status
Investigation and response support
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Describes detecting post-exploitation behavior such as PHP child shells and suspicious files.

Scope: Support capability, not confirmation of patches to Todyl infrastructure or customer PHP.

What users should do

Review enabled capabilities and retained logs; coordinate PHP patching separately.

Source URLs

  1. PHP2Shell response and scopehttps://www.todyl.com/blog/php2shell-client-data-breach-reportingResponse evidence

MXDR / SOAR

Response status
Investigation and response support
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Describes round-the-clock analyst investigation, containment and credential-reset response.

Scope: Support capability, not confirmation of patches to Todyl infrastructure or customer PHP.

What users should do

Review enabled capabilities and retained logs; coordinate PHP patching separately.

Source URLs

  1. PHP2Shell response and scopehttps://www.todyl.com/blog/php2shell-client-data-breach-reportingResponse evidence

GRC

Response status
Investigation and response support
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Describes organizing timestamped patch, rotation and investigation evidence with retained SIEM logs.

Scope: Support capability, not confirmation of patches to Todyl infrastructure or customer PHP.

What users should do

Review enabled capabilities and retained logs; coordinate PHP patching separately.

Source URLs

  1. PHP2Shell response and scopehttps://www.todyl.com/blog/php2shell-client-data-breach-reportingResponse evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice

Comments