Please do not publish suspected security flaws in an issue. Use GitHub's Report a vulnerability option under the repository's Security tab, or contact Secragon privately through its published contact channels. Include a minimal reproduction and the affected version; do not include real customer scan exports or credentials.

PHP2Shell Radar is an assessment tool. Scan only assets you are authorized to test. Active checks may briefly affect a PHP worker; the option is disabled by default. See the technical guide for precise limits.