The question is not whether your website will go down, but when.
We checked more than 1,000 Bulgarian websites - hotels, guest houses, dental clinics, law firms. This is what we found.
75 sites run software that no longer receives security updates at all. The most common by far is PHP 7.4, which stopped getting fixes in November 2022 - followed by PHP 5.6, and in a few cases PHP 5.3, unpatched since 2014. Almost none of this is a decision anybody made. It is a hosting default nobody revisited.
* What is a CVE?
A CVE is a public identifier for a weakness found in a specific version of a piece of software. Anyone can look up what a given number means in the NIST database at nvd.nist.gov. A version match does not prove a site is exploitable - the host may have applied the fix without changing the version number, which distribution packages often do. That is why every report we send says "reported against this version", never "you are vulnerable".
Free check: the results on a single page
We run a non-intrusive, read-only check of what is already publicly visible: HTTPS, certificate, response time, security headers and redirects. Nothing is attacked, nothing is logged in to.
Below is what a completed check looks like. The values are from an example site - your own report will contain your results, reviewed by a person before it is sent.
See a full sample report, with sources →
The check is a single snapshot. These are the same things we watch continuously, from €29 a month. See the plans →
Get a free website health check
No account, no obligatory call. We look at your site and email you the result - with what we would fix first.