Laravel PHP Security Updates
Laravel apps depend on the PHP version underneath them. We patch or upgrade PHP, update Composer dependencies, and check queues, scheduled jobs and storage before deployment.
PHP & Laravel upgrades · Composer audit · Queue and scheduler testing
Dependencies Checked
We run a Composer audit and check every package against the target PHP version before anything changes.
Jobs Keep Running
Queues, workers and scheduled tasks are tested after the change, so nothing silently stops processing.
Safe Deployment
Changes are tested on staging and deployed with a backup in place, so a failed release can be rolled back.
What's Included
Common Scenarios
Old Laravel on End-of-Life PHP
Your app runs a PHP version without upstream fixes. We plan a path to a supported version and carry it out.
Security Patch Due
A PHP or framework patch is out and you need it live quickly without breaking queues or scheduled tasks.
Dependency Drift
Packages have fallen behind and block the upgrade. We update them in controlled steps, with tests between each.
How a Laravel PHP Update Runs
£149 Check and Dependency Audit
We confirm the PHP version, patch level and exposure, then audit composer.lock — Laravel version, first-party packages (Horizon, Sanctum, Forge-related) and every package pinned against the old PHP.
Staging Replica
The app is cloned with its .env sanitized onto staging running the target PHP version. Queue workers, the scheduler and broadcasting are configured to mirror production.
Upgrade and Compatibility Fixes
PHP moves to the target release, composer dependencies are bumped or patched, and up to 5 broken items are repaired in scope. Your test suite runs where it exists; we add route-level smoke tests where it doesn't.
Cutover, Workers and Monitoring
Production switches with a tested rollback. Queue workers and scheduler are restarted and verified processing, config caches rebuilt, and error logs reviewed before handover.
Pricing
Transparent, scope-based pricing. Every job includes a backup, a staging test and a post-change check.
Emergency Patch
£999
Same or next day
- ✓Safe PHP patch to a supported release
- ✓Backup before change
- ✓Staging check
- ✓Post-patch verification
Managed Maintenance
£349 / month
£3,499 billed annually
- ✓Ongoing PHP and dependency patching
- ✓Advisory monitoring
- ✓Monthly report
- ✓Backups and uptime checks
- ✓The £149 PHP check included to start
- ✓Framework and composer dependency updates
Version Upgrade
£4,999
1–3 weeks
- ✓Move off end-of-life PHP
- ✓Compatibility testing
- ✓Staging QA
- ✓Rollback plan and post-upgrade support
Prices are indicative ranges based on project scope. Contact us for a tailored quote.
Frequently Asked Questions
Can you upgrade PHP and Laravel together?+
Yes, but we usually do it in separate steps so we can see which change caused an issue. The steps are agreed with you before we start.
What about my queues and scheduled jobs?+
We restart the workers after the upgrade, check the queue is processing, and confirm scheduled tasks run on time. This is part of every job.
Do you need access to production?+
We need the minimum access required for the job, usually a deploy key or a staging environment. We'll confirm the access model before we start.
Which Laravel versions can you upgrade?+
Laravel 8 through 13, including apps running on older unsupported releases. Very old versions may need intermediate hops — the upgrade path is mapped before any code changes, never improvised mid-job.
Will the upgrade touch Horizon, queues or scheduled tasks?+
They're part of the verification, not an afterthought: workers restart, horizon metrics are checked, queue depth is confirmed draining, and scheduled tasks are confirmed running on the new PHP before we close the job.
Start With the £149 PHP Check
Tell us which application you run and which PHP version it's on. You get a written report of your exposure and the recommended next step.