# MySafeSite

> Free passive website safety check by Titanium Computing. Grades a site A to F across five pillars and finds exposure to the critical PHP flaw CVE-2026-109618 and the Railway breach.

- [Run a check](https://mysafesite.io/): enter a domain, name and email; the report shows on screen and arrives by email.
- [Agent view](https://mysafesite.io/.agent): pillars, weights, PHP fixed versions, threats, actions, FAQs.
- [AVL manifest](https://mysafesite.io/agent.txt)
- [Support for agents](https://mysafesite.io/support/llms.txt)

## Pillars
- PHP & Platform (30%): PHP version against the CVE fix list; WordPress or other CMS; exposed login, XML-RPC and version files
- Hosting & Exposure (25%): Who hosts the site; Railway breach exposure; the provider's live status page
- Firewall & Edge (15%): Cloudflare, Sucuri or another firewall in front of the server
- Encryption & Headers (15%): SSL certificate, forced HTTPS, old TLS and browser security headers
- Email Spoofing (15%): SPF and DMARC records that stop spoofed email

## PHP fixed versions
- 8.5.12, 8.4.27, 8.3.36, 8.2.35. PHP 8.1 and older get no fix.

## Company
- Titanium Computing, Georgetown and Austin, Texas. Phone +1-512-623-9199. https://titaniumcomputing.com