Stop Running Software That’s Already Been Exploited
Your uptime monitor says everything’s green. Your SSL cert is valid. But if your server is still answering requests with Server: Apache/2.4.6 or X-Powered-By: PHP/7.4.33, you’re broadcasting an end-of-life software stack to every scanner and bot on the internet, including the ones looking for a known, unpatched CVE to walk through.
Seabhac.io’s HTTP checks can flag exactly this, for free, on every plan.
How it works
- Enable the toggle: Turn on “Check for outdated software” on any existing or new HTTP check no extra monitor, no extra cost.
- Header & fingerprint parsing: Every run inspects the
ServerandX-Powered-Byresponse headers, plus WordPress’s generator meta tag, for a product and version. - End-of-life lookup: Detected versions are checked against our daily-synced end-of-life database. If your PHP, Apache, nginx, or WordPress install has passed its support window, it’s flagged directly on the job result.
Why This Matters More Than a 200 OK
A server can return a perfect HTTP 200 on every single health check while quietly running:
- PHP 7.4 end-of-life since November 2022, no security patches since.
- Apache 2.4.6 the version still shipped by some enterprise Linux distros, years past its last CVE fix.
- An old WordPress core or plugin version the single most common entry point for automated compromise on the web.
Traditional uptime monitors were never built to catch this. They confirm your site is reachable not that it’s safe.
Built On a Real End-of-Life Database
Detected versions aren’t just pattern-matched — they’re cross-referenced against real release-cycle data synced daily from endoflife.date, so “end-of-life” reflects actual vendor support windows, not a guess.
- No new monitor required this rides on your existing HTTP checks, not a separate billable check type.
- Badge on every job result see the detected product, version, and EOL date right on the job detail page the moment it’s flagged.
- Growing coverage currently covers Apache, nginx, PHP, WordPress, and OpenSSL, with more products added as they surface a reliably detectable version string.