Sample £149 Check Report

Exactly what you get for £149: the confirmed version, the exposure verdict, the configuration details that matter, and the recommended next step in writing.

Worked example — hypothetical site, real advisory facts.

PHP CHECK REPORTHypothetical store · reference EX-0001

1. What we were given

  • Site type: WooCommerce store (WordPress 6.9.1, 14 active plugins)
  • Stated PHP version: unknown — the customer left the field blank
  • Hosting: shared hosting, cPanel panel, PHP-FPM
  • Access: none yet — findings are from the customer-supplied phpinfo output and Site Health export

2. Version and exposure

  • Confirmed PHP version: 8.2.31 (web SAPI), 8.2.31 (CLI)
  • Fixed release for this branch: 8.2.35 (21 Oct 2026)
  • Verdict: EXPOSED — patch level 31, fix released at 35. CVE-2026-109618 and CVE-2026-109619 affect this site until PHP reaches 8.2.35 or later.
  • WordPress core 6.9.1: not itself the issue; no core action needed from us

3. Configuration notes

  • display_errors: On — recommended Off in production (leaks paths and details to attackers)
  • OPcache: enabled — patch will require a PHP-FPM restart to take effect (noted for the patch job)
  • PHP version control: via cPanel MultiPHP — emergency patch is a supported job
  • No staging environment detected — the £249 add-on applies if the patch is booked

4. Recommended actions, in order

  • 1. Book the £999 emergency patch; we move PHP to 8.2.35 with a backup, staging test and smoke test. Recommended within days, not weeks — this is an actively relevant CVE pair.
  • 2. Add the £149 plugin & theme compatibility pass: 14 active plugins means real surface area for the patch to upset.
  • 3. Add the £249 staging setup, since no staging environment exists and patching without one means touching production blind.
  • 4. Plan a version upgrade to a supported branch: PHP 8.2 reaches end of life 31 Dec 2026, which leaves roughly ten weeks after the patch lands.

5. What this report does not cover

  • Compromise assessment: a patch closes the hole; it doesn't determine whether someone came through it first. Ask separately if you suspect an incident.
  • No plugin-level code review was performed (that's part of the paid upgrade), only the patch-exposure picture.
  • The £149 check fee is not credited against the patch or upgrade.
End of report — real reports are emailed as a PDF on the letterhead of the booking.

The report above is a worked example using a hypothetical store — no real customer data anywhere in it. It shows the structure and depth every £149 check report delivers.

Real customer reports carry their own site details; those details never appear here.

Reports are produced and reviewed by a person, not an automated scanner — the verdicts and recommendations are argued, not aggregated.

Get Yours for £149

Secure your place in the queue and the report lands in your inbox — typically within two working days of the checks running.