Symfony PHP Security Updates
Symfony applications need PHP and their Composer dependencies kept current together. We upgrade PHP, move Symfony forward in tested steps, and fix deprecations along the way.
PHP & Symfony upgrades · Deprecation fixes · Composer audit
Stepwise Upgrades
Symfony moves in versions. We upgrade in tested steps so each deprecation is fixed before the next change lands.
Dependencies Audited
Composer packages are checked for known advisories and PHP compatibility, then updated where safe.
Tested Before Release
Your test suite and critical routes run on staging, with a backup and rollback plan in place.
What's Included
Common Scenarios
Long-Lived Symfony App
Your app is several Symfony versions behind. We plan the path and bring it up to a supported release.
Advisory on a Dependency
A Composer package has a security advisory. We update it, check for breaking changes, and test before release.
PHP Version Blocker
The app can't run on a patched PHP version yet. We fix the incompatibilities and confirm the upgrade works.
How a Symfony PHP Update Runs
£149 Check and Bundle Audit
We confirm the PHP version, patch level and exposure, then audit composer.lock — Symfony version, bundle constraints, and every package pinned against the old PHP, including abandoned bundles.
Staging Replica
The app is cloned onto staging on the target PHP version with cache warmup, messenger workers and console commands configured to match production.
Upgrade and Deprecation Cleanup
PHP moves to the target release and Symfony is stepped to a compatible version. Deprecation notices are swept where they block the upgrade; up to 5 broken items are repaired in scope.
Cutover and Worker Verification
Production switches with a tested rollback. Messenger consumers restart, cache pools are warmed, and logs are reviewed — deprecations worth fixing next are listed in the handover notes.
Pricing
Transparent, scope-based pricing. Every job includes a backup, a staging test and a post-change check.
Emergency Patch
£999
Same or next day
- ✓Safe PHP patch to a supported release
- ✓Backup before change
- ✓Staging check
- ✓Post-patch verification
Managed Maintenance
£349 / month
£3,499 billed annually
- ✓Ongoing PHP and dependency patching
- ✓Advisory monitoring
- ✓Monthly report
- ✓Backups and uptime checks
- ✓The £149 PHP check included to start
- ✓Framework and composer dependency updates
Version Upgrade
£5,999
1–3 weeks
- ✓Move off end-of-life PHP
- ✓Compatibility testing
- ✓Staging QA
- ✓Rollback plan and post-upgrade support
Prices are indicative ranges based on project scope. Contact us for a tailored quote.
Frequently Asked Questions
Do you need my test suite?+
It helps a lot. If you don't have tests, we'll cover the critical routes with smoke tests before and after the change, and we'll tell you where the gaps are.
Can you upgrade Symfony across several major versions?+
Yes, but it's done in steps and scoped as a project. Each step is tested before the next one starts.
Will you keep the app patched after the upgrade?+
Our managed maintenance plan covers ongoing PHP and dependency patching, with a monthly report.
What if a bundle is abandoned upstream?+
We patch it where the fix is contained, or replace it with a maintained alternative and tell you the cost first. Abandoned bundles are the most common blocker on Symfony upgrades and we budget for them explicitly.
Can you do this while the app keeps running?+
Yes — staging does the heavy lifting, and production changes are brief: config, dependencies, a worker restart. Zero-downtime deploys are possible where your infrastructure already supports them.
Start With the £149 PHP Check
Tell us which application you run and which PHP version it's on. You get a written report of your exposure and the recommended next step.