Agreement
These terms govern your use of PatchScope at patchscope.evoa.one, operated by evoa.one (“PatchScope”, “we”, “us”). By using the site or its tools, you agree to these terms. If you do not agree, please do not use the service.
The service
PatchScope provides free informational tools:
- The PHP Version Checker and CVE Lookup, which compare input against a curated dataset of PHP lifecycle information and PHP engine advisories.
- The Website Security Checker, which performs a limited set of passive checks against a public website.
- Guides and reference content.
- A consultation request form and a deep analysis waitlist, described under “Consultation requests and paid analysis” below.
How results are produced, and their limitations, are described in the methodology.
Not professional advice
PatchScope is an informational service. Its results are not professional security advice, a security audit, a penetration test or a certification of any kind.
Results may be incomplete, out of date or inaccurate. In particular:
- A PHP version number alone cannot show whether a hosting provider or Linux distribution has backported security fixes.
- The website checker only sees what a site exposes publicly and cannot see server configuration, plugins, file permissions or application code.
- The dataset is curated and does not include every advisory.
No result means that a PHP version or website is secure. This applies equally to any future paid output, which would also not be a security audit, penetration test or certification. You remain responsible for assessing and securing your own systems, and for verifying important decisions with authoritative sources or qualified professionals.
Data accuracy and updates
The advisory and lifecycle data is a curated snapshot. It is updated through a reviewed process, but it may lag behind new PHP releases and advisories. The checker shows the snapshot’s coverage date and warns when the data is more than 45 days old. Each advisory shows its sources and verification level, and CVSS scores from different sources may differ. If you find an error, please report it through the contact page. We do not guarantee that corrections will be made within any particular time.
Authorized use of the website checker
You may only scan websites that you own or are explicitly authorized to test. By submitting a URL, you confirm that you have that authority.
The checker sends a limited number of passive requests, identified by the user agent PatchScopeBot/1.0. It does not exploit vulnerabilities, guess credentials, crawl, fuzz, scan ports, test forms or send POST requests. Even so, the owner of a website may notice and log these requests. You are responsible for any consequences of scanning a site without authorization. Mentioning a site address in a consultation request or on the waitlist does not authorize or order a scan.
Availability
We aim to keep the service available but do not guarantee uninterrupted access. Tools may be rate limited, temporarily unavailable or changed without notice, and a website scan may return “Unable to determine” when a target is slow, blocks automated requests or exceeds the scanner’s time and request limits.
Prohibited use
You agree not to:
- Use the service to attack, probe or harass third parties, or to scan websites without authorization.
- Run automated or mass scanning, or use scripts or bots to submit requests to the tools.
- Attempt to bypass rate limits, request caps, SSRF protections or other safeguards.
- Use the scanner to reach internal, private or non-public network resources.
- Interfere with or disrupt the service, its infrastructure or other users.
- Misrepresent PatchScope results as an audit or certification issued by us.
- Use the service in violation of applicable law.
We may block, limit or suspend access for any use we reasonably consider abusive or in breach of these terms, without notice.
Disclaimer of warranties
The service is provided “as is” and “as available”, without warranties of any kind, express or implied, including warranties of accuracy, completeness, fitness for a particular purpose, availability and non-infringement, to the extent permitted by applicable law.
Limitation of liability
To the extent permitted by applicable law, PatchScope and its operator are not liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of data, revenue, profits or business, arising out of or related to your use of, or inability to use, the service or its results. Where liability cannot be excluded, it is limited to the extent permitted by applicable law.
Nothing in these terms limits liability that cannot be limited under applicable law.
Third-party links and services
PatchScope links to third-party websites such as php.net, CVE.org, NVD, GitHub and WordPress.org. We do not control those sites and are not responsible for their content, availability or practices.
The service relies on third-party providers, including Cloudflare for hosting. Analytics and advertising from providers such as Google may appear, subject to your consent choices as described in the privacy policy.
Advertising
Advertising may appear on content pages. The core tools are free.
Consultation requests and paid analysis
Paid analysis: coming soon, price to be announced. There is no offer, order or fee at this time, and no payment is taken on this site. Price, payment, refund, scope and delivery terms will be published before any sale, after these terms have been reviewed again.
Joining the waitlist binds neither you nor us. A consultation request asks the operator to reply to you; it is not an engagement and does not create a professional-advice relationship. Any consulting work would need its own written agreement.
The consultation and waitlist forms are not for children under 14. How the details you submit are handled is described in the privacy policy.
Intellectual property
The site design, text and code are provided by the PatchScope project. Source code published in the GitHub repository is governed by the license stated there. Third-party names and trademarks belong to their respective owners and are used for identification only.
Changes to the service and terms
We may change, suspend or discontinue any part of the service at any time. We may also update these terms; the “updated” date at the top of this page shows the latest revision. Continued use after changes take effect means you accept the updated terms.
Governing law
These terms are governed by applicable law. If any provision is found unenforceable, the remaining provisions remain in effect.
Contact
Questions about these terms can be sent via the contact page.