Two days into PHP2Shell, the harder question is your vendors

Patching your own servers is the part you control. CyberRank shows which vendors are still exposing vulnerable PHP, from their URL alone, with no access and no questionnaires.