Skip to content
HHussain C

11Service

Security patching & server care

When PHP, Node.js or your server ships an urgent fix, I patch every server you have, check it worked, and tell you when it's done.

EmailWhatsAppSend a brief

The short answer

Updated

Security patching is keeping the software under your website up to date, so a newly found flaw can't be used to break in. I look after PHP and Node.js servers on Ubuntu, Debian and Docker. When an urgent fix lands, I patch every server the same day, check each one and report back.

Typical budget
Quoted per server
Timeline
Same day for emergency patches
How it's quoted
Quoted per server after a short call, as a monthly care plan or a one-off emergency fix.

When the next emergency patch drops, your servers are already on my list.

On 21 October 2026, PHP and Node.js both released emergency security fixes on the same day. Governments and big sites took their websites offline while they caught up. That night I patched 35 client servers, each with its own mix of operating system, PHP version and Node version. All of them were done by morning.

Most teams don't have someone whose job is to watch for these fixes and apply them fast. That's the gap I fill. I keep a list of what runs on each of your servers, so when the next one lands I already know what needs doing, and you get a message when it's done.

A good fit if

What you get

How a project runs

  1. Week 1

    Audit

    I go through each server and write down what it runs, what is out of date and what is most at risk.

  2. Weeks 1 to 3

    Catch up

    Bring everything up to date, and agree a plan for anything too old to patch in place.

  3. Ongoing

    Watch

    I follow security notices for everything on your list, so nothing urgent slips past.

  4. Same day

    Respond

    When an urgent fix lands, I patch, check and report back, usually before you've read about it.

All of it is under NDA. The private ledger lists it by role, stack and size. See the ledger

Questions people ask

How much does it cost?

It depends on how many servers you have and how different they are, so I quote it after a short call. Quoted per server after a short call, as a monthly care plan or a one-off emergency fix.

How fast can you patch in an emergency?

The same day. On PHP2Shell night in October 2026 I patched 35 client servers in about 8 to 12 hours, overnight.

Can you help if our PHP or Node version is too old to get the fix?

Yes. That's often the hardest part. I either move you to a supported version or close the server off from the internet until it can be moved, so it isn't sitting there exposed.

Will my sites go down while you patch?

Usually only for the few seconds it takes to restart PHP or the app. If a bigger upgrade is needed, we agree a time with you first.

Do you need full access to our servers?

I need SSH access to the servers I look after, under an account you can switch off at any time. Nothing else.

We only use Docker. Does that change anything?

It changes how the fix is done. Containers are rebuilt from patched images and redeployed, then I check that the running container really has the new version.

Further reading

Related services

Contact

Tell me what you're trying to fix.

I read every message myself and usually reply the same day. A rough idea is enough to start.

Or send a short brief

Hours

Your hours work for me.

  • San Francisco

    --:--

  • New York

    --:--

  • London

    --:--

  • Berlin

    --:--

  • Dubai

    --:--

  • Singapore

    --:--

  • Sydney

    --:--

  • Surat

    --:--

    Me

I keep flexible hours and move my day to overlap with yours, whether that's a morning standup in New York or a late release in Sydney.