What is the difference between the NZ$295 PHP update and full hardening?

The NZ$295 service focuses specifically on updating the PHP runtime to patch php2shell and checking for compromise. The NZ$595 full hardening package covers your entire Linux server: operating system upgrades, SSH key access, firewall configuration, fail2ban installation, web server hardening, and backup restore testing.

What is included in the full server hardening package?

Full hardening updates all OS packages, locks down SSH to key-only authentication, configures UFW firewall rules, installs fail2ban to block brute-force bots, hardens PHP-FPM and web server configurations, removes public version banners, and verifies your backups can actually be restored.

What server environments and operating systems do you support?

We work on Ubuntu LTS, Debian and AlmaLinux servers, including moving older releases onto a supported one, on common cloud and VPS hosts (AWS, DigitalOcean, Linode, Vultr, Hetzner) with Nginx or Apache.

When does Ubuntu 22.04 LTS standard support end?

Standard security maintenance for Ubuntu 22.04 LTS ends in May 2027. We help businesses plan and execute clean migrations to Ubuntu 24.04 LTS well before maintenance expires. Checked on 26 October 2026 against Ubuntu's release cycle page .

How does monthly server patching work?

For NZ$149 per month per server, we apply tested operating system and PHP security updates, monitor server uptime, inspect log files for anomalies, and verify your off-site backups continue to run properly.

Linux & PHP Server Hardening

Server Update and Hardening for Linux and PHP

Update outdated OS and PHP versions, configure firewalls, fail2ban, SSH key access and TLS encryption. NZ$595 per server, scoped in writing.

Harden Your Server Review Pricing

Proof routes:Review proof

Linux server update and security hardening

Official PHP Supported Versions

Check active and security support release dates directly from php.net.

Check PHP Lifecycles

Infrastructure Security

Keep your server patched, before end-of-life deadlines leave you exposed

Server hardening and routine patching close the known, already-fixed holes that automated attack scripts look for every day. We update your server stack to supported releases and add layered protections (defence in depth), so one missed setting is not the only thing in the way.

Operating on obsolete software exposes your business to unpatched vulnerabilities. Official security maintenance for PHP 8.2 ends on 31 December 2026 (active support ended 31 December 2024), leaving installations without security updates. Ubuntu 22.04 LTS standard security maintenance ends in May 2027. Both dates checked on 26 October 2026 against php.net (supported versions) and ubuntu.com (release cycle).

If you need a quick fix for the critical php2shell vulnerability (CVE-2026-109618 and CVE-2026-109619), we offer a focused PHP update and compromise check for NZ$295. For full server hardening, we upgrade OS packages, enforce SSH key-only access, configure UFW firewall rules, deploy fail2ban intrusion prevention, verify TLS ciphers, and test backup integrity. Before we log in, the server owner gives written permission and SSH or control panel access. NullGlitch is a sole trader and not GST-registered, so no GST is added.

What We Handle

What’s included in Server Update & Hardening

Built around commercial clarity, faster delivery, and clean execution.

OS and PHP updates to supported versions

Upgrade Ubuntu and PHP stacks to active LTS and supported maintenance versions, closing known CVE vulnerabilities.

Supported PHP versions

Ubuntu LTS upgrades

Planned switchover window

Rollback snapshots taken

SSH key authentication and port security

Disable password authentication across SSH, enforce ED25519/RSA keys, and optionally change default ports to reduce automated noise.

No password guessing

Key-based access only

Root login disabled

Less automated login noise

UFW firewall and fail2ban deployment

Configure host firewalls to expose only required web ports, and set up fail2ban to automatically ban repeat offending IP addresses.

Port access lockdown

Automated IP bans

Rate-limiting rules

Protects against log flooding

Web server and PHP runtime lockdown

Harden Nginx, Apache, and PHP-FPM configurations to disable directory indexing, suppress server headers, and restrict dangerous functions.

No directory listings

Version headers removed

Upload folder execution off

PHP function restrictions

TLS cipher hardening and certificate check

Audit SSL/TLS configuration against modern security standards, enforce TLS 1.2/1.3, and verify automatic certificate renewal.

Modern TLS settings

Strong cipher suites

Auto-renewing certificates

Enforced HTTPS redirects

Backup verification and restore testing

Confirm that automated off-site backups run on schedule, and perform an actual test restore to verify data can be recovered.

Off-site backup check

Test restore verification

Disaster recovery readiness

Database dump integrity

Delivery

How the project runs

Clear phases, no mystery, and no padded process theatre.

Audit & Snapshot

With the owner's written permission, review packages and PHP, then take a snapshot.

OS & PHP Upgrade

Upgrade core packages and PHP to supported releases, testing compatibility.

Security Hardening

Configure SSH key-only access, UFW firewall, fail2ban, and web server rules.

Backup Test & Report

Verify backups with a test restore and provide complete written documentation.

Server Update & Hardening Pricing

Transparent options for server update & hardening work, scoped around delivery rather than fluff.

php2shell PHP Update

Quick update of PHP to fixed releases and compromise check

NZ$295fixed price, focused PHP patch

PHP updated to 8.5.12, 8.4.27, 8.3.36, or 8.2.35
Patches critical CVE-2026-109618 and CVE-2026-109619
Checks for indicators of unauthorised compromise
Verification of website and extension compatibility
Rollback snapshot taken before upgrade begins
NullGlitch is a sole trader and not GST-registered, so no GST is added

Book PHP Update

Full Server Hardening

Comprehensive OS, PHP, firewall, SSH, and backup hardening

NZ$595per server, one-off fixed price

OS package updates and PHP upgrade to supported release
SSH key-only authentication; passwords disabled
UFW firewall configuration and fail2ban deployment
Nginx/Apache security headers and upload lockdown
TLS cipher review and auto-renewal check
Backup verification and restore test performed
NullGlitch is a sole trader and not GST-registered, so no GST is added

Harden My Server

Monthly Server Patching

Ongoing OS and security patch management and monitoring

NZ$149per month per server

Monthly operating system security patch installation
PHP runtime minor security updates applied
Uptime and SSL certificate validity monitoring
Monthly backup verification and restore test
Priority response if an emergency zero-day CVE arises
Cancel anytime with no lock-in contract

Subscribe to Patching

All prices are estimates. Final quote based on project scope. Contact us for a custom quote.

FAQ

Questions before you commit

Straight answers on timing, scope, support, and what happens after launch.

In addition to the critical php2shell vulnerability (CVE-2026-109618 and CVE-2026-109619) disclosed on 21 October 2026, PHP 8.2 reaches its official end of life for security fixes on 31 December 2026. Running unsupported PHP means future vulnerabilities will not receive security patches. Checked on 26 October 2026 against php.net supported versions.

Next Step

Ready to move this forward

If the goal is cleaner delivery, stronger proof, and a site or system that earns its keep, let’s scope the next step properly.

Harden Your Server View All Services