PHP Vulnerability Responses by Company

Vanta

Global cloud / infrastructure
Aliases / services
Vanta / Vanta Inc. / Vanta Exchange / Vanta Agent / vanta.com
Official website
https://www.vanta.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Vanta TPRM and Vanta Agent investigation support

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

Security and vendor risk management.

The article explains vendor alerts in Continuous Monitoring, PHP asset checks using Vanta Agent, and questionnaires through Vanta Exchange.

Scope: Monitoring and investigation features do not automatically patch your or vendors' PHP.

What users should do

Review Vendors Monitoring and available Agent queries, and request affected vendors' status.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://www.vanta.com/resources/php2shell-the-critical-php-vulnerabilities-and-the-vendor-blast-radiusService and operation documentation
  2. Operating entityhttps://www.vanta.com/legal/termsService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice; link to this PHP incident unconfirmed
  2. Operating entityOfficial information directory

Comments