9.2 / 10
Severity score of both flaws (CVE-2026-109618 and CVE-2026-109619). Singapore's Cyber Security Agency reports widespread exploitation attempts.
Read the CSA alertFor WordPress, Joomla, Drupal, Magento and every PHP site
Two critical PHP flaws can let attackers take over a web server without a password. Your host can patch this one. We move your site to fast hosting with no PHP at all, so the next PHP flaw has nothing to hit.
See what your site runs on and which plan fits. It takes about 10 seconds.
We only read public pages, the way a search engine does.
9.2 / 10
Severity score of both flaws (CVE-2026-109618 and CVE-2026-109619). Singapore's Cyber Security Agency reports widespread exploitation attempts.
Read the CSA alertPHP only
Updating WordPress does not fix these flaws. A PHP update does: 8.2.35, 8.3.36, 8.4.27 or 8.5.12, released 21 to 22 October.
See the PHP release notesAbout 1 in 3
WordPress sites run PHP 8.1 or older. The PHP project no longer fixes those versions.
WordPress.org PHP statsResearchers logged 11,334 new WordPress security flaws in 2025, mostly in plugins. Patchstack report
For portfolio, brochure and small business sites.
Enter your address. We count your pages, spot your builder and plugins, and suggest a plan.
Add one code to your domain settings and one to your site. Nobody can copy a site they do not own.
Pages, posts, images and menus move across. Page addresses, titles and descriptions stay the same, which protects your Google rankings.
Check the preview link. Then point your domain to us with one setting. Your email stays where it is.
We move sites from WordPress · Joomla · Drupal · Magento · PrestaShop · OpenCart · osCommerce · TYPO3 · Craft CMS · any PHP site
Most small sites go live in about 5 business days. A person checks every site before it goes live.
Your new site has no PHP and no plugins. PHP and plugin flaws have nothing to target.
We copy a site only after its owner proves they control it.
Every page is encrypted, with security headers that block common browser attacks.
Every change is saved, so we can restore any page.
Monthly plans, hosting included. Prices in Singapore dollars. Cancel any time.
Loading plans…
Online shops and complex sites need a custom review, and we still move fast. Our AI audits your site, a person checks every finding, and you get a proposal within 2 business days.
No. The flaws sit in PHP itself, so only a PHP update fixes them, and your host can do that. Moving off PHP means the next PHP flaw cannot reach your site.
Yes. Today we make your edits for you within 1 business day. Our self-edit editor, with AI writing help, is in early access.
We work to keep them, and we keep looking after your SEO while you are with us. We keep your page addresses, titles and descriptions, and send any changed address to its new one. Google decides rankings, so no one can promise them.
Nothing. Your email stays with your current provider. We only change where your website points.
Portfolio, brochure and small business sites without a shop or member logins, on WordPress, Joomla, Drupal or any other PHP system. The free check tells you in 10 seconds.
No. Shopify does not run on PHP, and Shopify patches its own platform. Moving a WooCommerce shop to Shopify is one route we offer.
You do. If you leave, we hand you your site files.
Starter sites show this small link in the footer. Business and Pro plans can switch it off.
Yes. We work remotely with clients anywhere. Prices are in Singapore dollars.
Tell us about your site. We reply within 1 business day.