Skip to content
Start free trial
Menu
Sign inFree scanStart with your public exposureAttacker’s View™Who it’s forFor MSPsOne security assessment tool for every clientPricingTrustProduct overviewFrom security findings to a clear action planMicrosoft 365Identity, email, sharing, apps, and devicesAzure securityReview your cloud configuration and exposureVulnerability WatchAdvisories matched to your technologyInsurance evidenceUnderstand what supports your answersAI assistant · BetaExplore your evidence in plain languageDemo videosSee the product before you sign upGuides & insightsPractical security reading
← What we check

Keep the public website on software its maker still supports

External Attack SurfaceMedium severity

A website can announce the software it runs on to every visitor. When that is a version its maker has stopped fixing, flaws found afterwards stay open unless the hosting company patches it itself. PHP, the Apache web server and Microsoft's IIS are the software judged today.

A scan reports where your tenant stands on this check — pass, fail with a step-by-step fix, or not applicable if your licensing doesn’t include the feature. When Tenant Strike can’t read a setting with read-only access, it says unverified and gives you a one-command way to confirm it yourself — it never guesses.

Related External Attack Surface checks

Check your own tenant

Is your tenant covered on "keep the public website on software its maker still supports"?

One read-only scan answers it — this check and every other one in the catalog, each with a plain-English fix. 7-day Pro trial, no credit card.

Start 7-day Pro trialBrowse all checks