@meta
  v: 1
  route: /
  generated: 2026-10-22T18:47:15Z
  ttl: 1d

@intent
  purpose: Free passive website safety check graded A to F; finds exposure to the critical PHP flaw CVE-2026-109618 and the Railway breach
  audience: small-business-owner, website-manager, ai-agent
  capability: check-site, compare-competitor, watch-site, request-fix, call

@state
  product: MySafeSite
  provider: Titanium Computing
  price: free
  phone: +1-512-623-9199
  check_time: about 20 seconds
  method: passive; reads public DNS, the homepage, a few public WordPress paths, the TLS certificate and provider status pages; never logs in or attacks
  output: "0 to 100 score, A to F grade, findings with fix steps, AI summary, emailed report, share link"
  grading: "A 90+, B 80+, C 70+, D 60+, F below 60; any urgent issue caps the grade at D"
  pillars[5]{name,weight_pct,checks}:
    PHP & Platform,30,"PHP version against the CVE fix list; WordPress or other CMS; exposed login, XML-RPC and version files"
    Hosting & Exposure,25,Who hosts the site; Railway breach exposure; the provider's live status page
    Firewall & Edge,15,"Cloudflare, Sucuri or another firewall in front of the server"
    Encryption & Headers,15,"SSL certificate, forced HTTPS, old TLS and browser security headers"
    Email Spoofing,15,SPF and DMARC records that stop spoofed email
  php_fixed_versions[4]{branch,fixed_in}:
    8.5,8.5.12
    8.4,8.4.27
    8.3,8.3.36
    8.2,8.2.35
  php_end_of_life: 8.1 and older get no fix
  threats[2]{name,date,summary}:
    PHP CVE-2026-109618 / CVE-2026-109619,2026-10-20,"Critical (CVSS 9.2) flaw in the PHP interpreter; every WordPress, Drupal, Joomla or Magento site on an unpatched PHP version is exposed"
    Railway environment variable breach,2026-10-21,Railway disclosed that an attacker accessed customer environment variables holding API keys and database passwords; every key stored there should be replaced
  status_pages_checked: "Railway, Cloudflare, Vercel, Netlify, DigitalOcean, Render, Fly.io, Kinsta, Shopify, Squarespace, Wix, GoDaddy, Hostinger, Linode, Sucuri, Heroku, Google Cloud and links for AWS, Azure, WP Engine, SiteGround, Bluehost, HostGator, Hetzner, OVHcloud, Vultr"
  report_features[6]:
    - Plain-English AI summary written on Titanium Computing's own servers
    - Fix this for me button on every finding
    - Do-it-yourself steps with copy-paste snippets
    - Weekly watch that emails only when something changes
    - Side-by-side competitor comparison
    - Printable PDF
  family[7]{name,url,what}:
    Titanium Computing,https://titaniumcomputing.com,Managed IT and cybersecurity for Texas businesses
    AMP Cortex,https://ampcortex.ai,Cloud business phone system
    CallScrub,https://callscrub.io,AI sales call analysis and coaching
    AEOCheck,https://aeocheck.ai,AI and answer engine optimization audit
    FormFlows,https://formflows.ai,Conversational forms with AI voice
    Titanium Bot,https://titanium.bot,AI agent you teach the job once
    KrakenOS,https://krakenos.net,Agentic AI for your business
  faqs[4]{question,answer}:
    Is the check safe to run on my site?,"Yes. It only reads what any visitor can see: DNS, your homepage, a few public WordPress paths and your SSL certificate. It never logs in, guesses passwords or sends attack traffic."
    Why is my PHP version unknown?,"Many servers hide it, and good firewalls block automated scans. The report says so plainly; Titanium Computing can confirm the version from the inside."
    What do you do with my email?,We email you the report and send Titanium Computing a copy so we can help if you ask. Follow-up only if you tick the box; you can unsubscribe any time.
    How is the grade worked out?,"Five weighted pillars add up to 100 points. A red finding costs 70% of its pillar, yellow findings cost 20% each up to half, and any red caps the grade at D."

@actions
  - id: run_safety_check
    method: POST
    href: /api/report
    inputs[4]{name,type,required}:
      domain,string,true
      name,string,true
      email,email,true
      consent,boolean,false
  - id: view_shared_report
    method: GET
    href: /?r={report_id}
  - id: call_titanium_computing
    method: GET
    href: tel:+15126239199
  - id: contact_titanium_computing
    method: GET
    href: https://titaniumcomputing.com/contact/

@context
  > A critical PHP flaw (CVE-2026-109618) and the Railway hosting breach put thousands of business websites at risk. MySafeSite checks yours the way an attacker would see it, then grades it A to F across five pillars.
  > Brought to you by Titanium Computing, managed IT and cybersecurity for Texas businesses from Georgetown and Austin.

@nav
  self: /.agent
  parents: []
  peers: []