# Report an emergency

> How to report a server emergency to PHP SOS.

Source: https://phpsos.de/en/notfall/  
As of: 25/10/2026  
Provider: PHP SOS, PHP emergency help and server security. Immediate help via WhatsApp: https://wa.me/491736494914?text=Hello%20PHP%20SOS%2C%20we%20need%20help%20with%20our%20PHP%20server.%20Company%3A%20%E2%80%A6%20Website%3A%20%E2%80%A6

Write via WhatsApp (https://wa.me/491736494914?text=Hello%20PHP%20SOS%2C%20we%20need%20help%20with%20our%20PHP%20server.%20Company%3A%20%E2%80%A6%20Website%3A%20%E2%80%A6) or call (+49 221 29247300). We work remotely.

What we need first: website or server address, PHP version and host or server type, what you observed and since when, who can grant access.

## The first hour

1. Name a responsible person and note the time you became aware.
2. Delete nothing, do not rebuild the server: traces are evidence.
3. Determine the PHP version and operating mode (php -v, hosting panel).
4. Ask the host or service provider in writing for the patch level.
5. No patch possible? Put the website into maintenance or take it offline (recommendation of the German Federal Office for Information Security, BSI).
6. Preserve logs from 20 October 2026: web server, PHP-FPM, logins.
7. List all PHP systems: website, shop, portals, internal tools.
8. Inform the data protection officer (possible 72-hour deadline).
9. Inform the cyber insurer, if you have one.
10. Contact PHP SOS via WhatsApp and prepare access.