Vectra AI, Inc.
- Aliases / services
- Vectra AI / Vectra AI, Inc. / Vectra Match / Vectra PHP Server Visibility / vectra.ai
- Official website
- https://www.vectra.ai
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Vectra PHP Server Visibility dashboard
- Response status
- PHP visibility guidance available
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Network detection and response.
The dashboard identifies potential PHP servers from cleartext HTTP indicators such as .php and PHPSESSID; encrypted traffic and hidden indicators can be missed.
Scope: This is neither a complete inventory nor a patch verdict; investigate possible compromise separately.
What users should do
Reconcile results with inventory and verify patches on the running PHP build.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://www.vectra.ai/blog/a-patched-php-server-can-still-be-a-compromised-oneResponse evidence
Vectra Match
- Response status
- PHP2Shell detection rules documented
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The article lists PHP2Shell-related rules. Rule 2072552 is disabled by default, and 2072555 is a hunting indicator rather than proof of exploitation.
Scope: A signature match does not prove successful exploitation; this differs from the visibility dashboard.
What users should do
Review rule state and traffic coverage, tune detections, and perform PHP patching and compromise assessment separately.
Source URLs
- PHP2Shell response and scopehttps://www.vectra.ai/blog/a-patched-php-server-can-still-be-a-compromised-oneResponse evidence
Related official sources
- PHP2Shell response and scopeOfficial notice
- Operating entityOfficial information directory
Comments