twosteps GmbH

Global hosting

Aliases / services: Twosteps / twosteps.net / twosteps GmbH
Official website: https://www.twosteps.net/

Sources identifying the operating company

https://www.twosteps.net/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Shared Hosting

Response status: Patched
Response information checked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Updates and verification completed at 06:51 on October 22. Active PHP runtimes on shared hosts in Germany, France and Canada were patched; temporary WAF restrictions were removed.

What users should do

Shared hosting is patched by the provider. Update PHP packages and services on self-managed servers.

Official service URL

https://www.twosteps.net/

Source URLs

Twosteps: PHP security responsehttps://blog.twosteps.net/php-sicherheitsluecke-oktober-2026/Response evidence

Related official sources

Twosteps: PHP security responseOfficial notice