Security without patches
Flaws found in old versions don't get fixed. The system stays exposed even if nobody notices.
How we fix it: we harden the server first and then upgrade.
We bring CRMs, online stores and business systems stuck on unsupported versions up to date, without stopping day-to-day work.
Spain and Latin America · Assessment before any quote · No downtime for your operation
1,435
days without security patches for PHP 7.4
Pick your system
Many companies grew on a system that was installed years ago and never touched again. On the outside it runs fine; underneath it runs on versions that no longer get patches, on an unsupported server, with customizations only the person who wrote them understands.
Flaws found in old versions don't get fixed. The system stays exposed even if nobody notices.
How we fix it: we harden the server first and then upgrade.
Payments, e-invoicing, email or the website stop connecting, and spreadsheets and manual data entry come back.
How we fix it: we reconnect each integration and test it on a copy.
If only one person knows how the system works, every change is slow, expensive or impossible.
How we fix it: we document what changed, where and why.
Before any quote we inventory the language, the database, the server, the system and its integrations. We measure which processes depend on each piece and what a failure would cost.
CRMs, stores, websites and in-house systems still running on unsupported versions. Find yours: next to it is the guide to understand the risk it carries.
We can still assess it: the method is the same for any system.
Tell us which oneAfter the assessment we choose with your team the shortest path back to a supported system. You don't always have to rebuild anything.
We reduce exposure right away: access, server and verified backups. It buys time with the risk under control.
We move the system to a current version on PHP 8.3 or later, with its customizations and data.
For custom systems, we fix the code so it runs on current PHP versions.
We move the data and processes to another platform, or build a custom system.
If the system no longer fits the business, we cover it in custom software development.
Same data, same customizations, same integrations. What changes is what lies underneath.
Operation online during the whole switch
Assessment. We inventory versions, server, integrations and customizations. We measure which processes depend on the system and what a failure would cost.
Plan with dates. We choose the path (upgrade, adapt, harden or migrate) and order it by risk: first whatever exposes data or could stop the operation.
Test copy. Everything is done first on a copy of the system. Nothing touches production without being tested.
Go-live. We switch at the lowest-impact moment, with a rollback ready.
Ongoing support. The system is documented and maintained, so it doesn't fall behind again. See software support and maintenance.
On October 21, 2026, PHP fixed two critical flaws. The minimum safe versions are 8.2.35, 8.3.36, 8.4.27 and 8.5.12, and PHP 8.1 or older don't get the official fix.
Which version does your system run?
We tell you whether it still gets patches and which path usually makes sense.
| Branch | Minimum safe version | Supported until |
|---|---|---|
| PHP 8.5 | 8.5.12 | 2029 |
| PHP 8.4 | 8.4.27 | 2028 |
| PHP 8.3 | 8.3.36 | 2027 |
| PHP 8.2 | 8.2.35 | Dec 31, 2026 |
| PHP 8.1 or older | No official fix | Ended |
We explain it in detail (in Spanish) in Actualizar PHP: qué riesgo corre un sistema sin soporte.
We review your system and give you, in writing:
No commitment · Remote, Spain and Latin America · No downtime
If your question isn't here, message us on WhatsApp.
Ask on WhatsAppIt is a system the company still uses every day, but that sits on old technology: unsupported versions, code nobody maintains or integrations that no longer work. The problem isn't its age, but that it has become a risk to the operation.
The system keeps working, but every new flaw that is discovered stays open forever. Over time, integrations, modules and payment gateways that require current versions also stop working.
It is almost never the first step. Often upgrading it or adapting its code to current versions is enough. Rebuilding only makes sense when the system no longer fits how the company works.
Yes, that is the starting point. In the assessment we list every customization and integration that has to stay, and the migration is checked against that list before going to production.
Yes. Everything is prepared and tested on a copy of the system, and the production switch happens at the lowest-impact moment, with a rollback ready in case something doesn't go as expected.
That is the most common case. We read the code and the database, rebuild how it works and document it, so the company stops depending on a single person.
Read access to the server and the system, and a talk with whoever uses it every day. We work remotely and on your schedule.
It depends on the system, its customizations and integrations. Adapting a well-built system can take weeks; migrating a heavily customized one, months. After the assessment we give you a plan with fixed timelines and cost.
Your team can, with the documentation we leave, or we can take care of it with a support and maintenance plan so the system doesn't fall behind again.
Yes. We work remotely with teams in Spain and across Latin America, on their schedule and under their regulations (for example, data protection in Spain or e-invoicing in Argentina or Mexico).