Security watch

We keep watch. So you don't have to.

New vulnerabilities appear every week in the software that websites run on. We follow them, work out what they mean for your site and act on them right away. Here you can see how, and what we have done recently.

What we did Status page

netslim · security watch

$ netslim wacht --status
volgt       PHP, WordPress, Plesk, Linux
            en de meldingen van CERT-EU
systemen    alle systemen werken

$ netslim wacht --laatste
melding     PHP2Shell
datum       21 okt 2026
afgeschermd dezelfde dag
klantsites  geen enkele geraakt
stand       we zijn ermee bezig

jij         niets

now All systems operational View the status page

live · all Netslim sites combined

12,764

attacks and malicious requests blocked by Netslim Edge · average of 0 per minute

How the watch works

From alert to update,
without you noticing a thing

A vulnerability becomes public. From that moment, every hour counts, because criminals read the news too. This is what we do.

To be honest, nobody is immune to a new vulnerability in advance, and neither are we. The difference is who keeps an eye on it and how fast action is taken.

Monitor

We follow the security advisories for PHP, WordPress, Plesk and Linux, and the warnings from CERT-EU, the cyber service of the European Union.

Investigate

Does it affect our servers? Which sites run on an affected version? How serious is it? We find this out right away.

Protect

If there is no update yet, we add extra locks on the servers. If your site is behind Netslim Edge, a filter stops known attacks before they reach your server.

Update

When the update is released, it goes onto all our servers. Your site stays online while this happens. If your site runs on a version that no longer gets updates, we will contact you.

Inform

What is going on and what we did, you can read on our status page and in your account. In plain language, and below in the log.

Log

What we did recently

Every time a vulnerability can affect us or our customers, it is listed here. With what we did, and when.

21 Oct 2026 Critical · 9.2 of 10 We are working on it

PHP2Shell: two critical vulnerabilities in PHP

Two flaws in PHP itself (CVE-2026-109618 and CVE-2026-109619) that let an attacker run code on a server through an ordinary request. Every site running PHP was affected, including WordPress. Sites around the world went offline as a precaution.

20 Oct
PHP announces an emergency update. We follow the alerts from PHP and CERT-EU and get everything ready.
21 Oct · 16:00
PHP releases the update.
21 Oct
Extra locks on our servers, and a filter on Netslim Edge that blocks known attacks on this vulnerability, even when hidden in large uploads.
21 Oct
We checked our servers for signs of abuse. No customer site was affected by this vulnerability. No site had to go offline.
22 Oct
Plesk, the management software on our servers, has released the updated PHP versions. They are going onto all our servers.

Read the full story

New in our security

We keep building every week

Keeping watch is one thing. We also keep improving the security of your site. This is what we added recently.

22 Oct 2026

The security watch: see what we do for every new vulnerability

When a new vulnerability makes the news, like the PHP vulnerability of October, we follow it and act right away. On the new Security watch page you can see…

21 Oct 2026

Netslim Edge blocks attacks on the PHP vulnerability

For the PHP vulnerability in the news (PHP2Shell), Netslim Edge has a filter that blocks known attacks before they reach your server. Large uploads are also scanned as they come in,…

14 Oct 2026

Every SSL certificate, and free SSL on all your hosting

Under SSL certificates you can now order the full range: domain validation, organisation validation, EV, wildcard and multi-domain. If your site runs with us, it already has a free Let's Encrypt certificate that automatically…

13 Oct 2026

Log: every error, with advice

Under Edge › Log you see every error the edge saw: pages that don't exist, errors from your web server, what the firewall blocked and who got the browser check. Filter…

13 Oct 2026

Live: this many attacks have already been blocked

Our site now has a counter that shows how many attacks and malicious requests our edge has already blocked, across all Netslim sites combined. It's live, and it never stops.

12 Oct 2026

Block IP addresses yourself

Does one address keep bothering your site or copying your prices? Block it with one click from your log, for an hour, a day, a week or for good.

For your site too

Let us keep watch

Move to Netslim for free

We move your site for free and without downtime. After that it is covered by the watch: updates, backups and the locks for a new vulnerability.

Free migration

Netslim Edge for your site

Stay with your current host and put Netslim Edge in front of it. Then we stop attacks before they reach your server. The updates on your server stay with your host.

View Netslim Edge