Free tool
What is your website really running?
Type your website. We load the home page once, the way any visitor does, and read what the server says about itself: its PHP version, its web server (Apache, nginx, IIS, LiteSpeed and the rest), OpenSSL, Python, ASP.NET, Drupal or WordPress, whatever it names. Each version is matched against every published flaw for it in our vulnerability database, and we tell you what still gets security updates and what to ask your host.
Why it matters
Old versions keep running long after they stop getting fixes. When a serious flaw is published, like PHP2Shell this month, sites on those versions have nothing to install.
What we read
The Server and X-Powered-By headers the site sends with every page, and the WordPress version in its code. Nothing a normal visitor's browser doesn't already receive.
What we found locally
When we rechecked Grand Strand sites in October 2026, five were on PHP versions that no longer get security updates. The oldest stopped getting them in 2018.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.