Current situation: PHP2Shell. Two critical PHP vulnerabilities (CVSS 9.2) allow malicious code without login. Patches since 21 October 2026.What to do now →
14 pages

IT security by industry

Practices, law firms, shops, municipalities, trades: every industry has its own data, obligations and weak points. This is how we proceed for each industry.

01

Online Shop Hacked? IT Security for Merchants

A shop is your till, your customer file and your shop window in one. We show what to do first when a PHP shop is attacked and who is responsible for what.

Read more →
02

Website Security for Medical Practices and MVZ

Practice websites handle appointment requests, prescription requests and questions about test results. We show where health data ends up and who has to act when a vulnerability appears.

Read more →
03

IT Security for Law Firms: Professional Secrecy on the Web Server

Law firms increasingly exchange briefs, powers of attorney and evidence through portals. We show where PHP systems run in a law firm and how an incident can be kept confidential.

Read more →
04

IT Security for Tax Advisors and Their Client Portals

Tax firms handle bank details, payroll statements and tax IDs of entire workforces. We show which portals run on PHP and what counts first in an incident.

Read more →
05

Trades Business Website Hacked: Help for Firms Without an IT Department

In a trades business, hardly anyone looks after the website full-time. We show what to do about PHP2Shell or a hack when the web designer is no longer reachable.

Read more →
06

Cybersecurity for Mid-Sized Business and Industry: Keeping PHP Systems Under Control

Alongside the company website, mid-sized firms often run dozens of PHP applications that nobody manages centrally. We show how to find them, secure them and prove their status to customers and authorities.

Read more →
07

Vulnerability on a Municipal Website: A Guide for Local Administrations

A municipality's website is both an official source of information and the gateway to public services. We show how administrations respond to PHP2Shell and who decides what in-house.

Read more →
08

Moodle Security for Schools and Education Providers

Learning platforms such as Moodle hold data on minors, grades and submissions. We show how schools and education providers respond to PHP2Shell and who is responsible.

Read more →
09

Hotel Website Hacked? IT Security for Hotels and Hospitality

Hotel websites combine direct booking, voucher sales and guest communication. We show where PHP vulnerabilities do damage there and how to proceed in the first hours.

Read more →
10

IT Security for Property Management and Real Estate Companies

Property managers handle tenancy agreements, bank details and tenant self-disclosures, often through portals and online forms. We show where PHP vulnerabilities strike and what to do in the first hours.

Read more →
11

White-Label IT Security: A Security Partner for Agencies

Agencies often look after dozens of client sites on different servers. We work in the background: you remain your clients' point of contact, we take over patches, cleanup and proof.

Read more →
12

Club Website Hacked? IT Security for Clubs and Associations

Club websites are often maintained by volunteers yet hold member data and bank details. We show what boards can do about PHP2Shell or a hack, even on a small budget.

Read more →
13

Website Security for Pharmacies: Pre-Orders, Shop and Health Data

Pharmacy websites handle pre-orders, prescription photos and shop orders. We show where health data ends up and what to do first about PHP2Shell.

Read more →
14

Cybersecurity for Logistics and Freight Forwarding: Portals and Supply Chains

In logistics, portals connect customers, drivers, warehouses and clients. We show where PHP systems run, which data interests attackers and how to keep operations going during an incident.

Read more →
Immediate contact

Every hour counts. Write to us now.

Briefly describe your system, PHP version and observation. We will get back to you, clarify the situation and work remotely until the incident is closed and documented.

Immediate help