Information reviewed： · Published by Tsumira Japan (SourceArt Ltd)
Inconclusive means the public response did not provide enough evidence. It does not mean safe or vulnerable. Continue through your control panel or provider without changing public security settings.
Why public evidence may be missing
PHP version disclosure can be disabled. A response may also come from a cache or CDN rather than the underlying PHP server.
Access controls, bot protection, redirects and timeouts can prevent this tool from retrieving useful information. A failed check does not necessarily mean the site is unavailable to normal visitors.
Keep protection in place
Do not disable a WAF, expose runtime details or publish diagnostic files just to obtain a result. Prefer existing administrative tools.
This tool reads public information using normal HTTP HEAD requests. It does not log in, inventory internal servers or determine whether a compromise occurred.
Prepare a manual handover
Record the URL, time, displayed outcome and provider if known. It is acceptable not to know the version yet.
Find the person who can access the panel or supplier support. Redact account identifiers and credentials from screenshots; do not submit them in the public form.
Questions and answers
Should I retry repeatedly?
A temporary connection issue may clear, but a deliberately hidden version will stay inconclusive. Move to administrative information instead.
Is a manual review free?
Cost depends on scope. Any paid investigation is agreed before work starts.
Official references
Official guidance and interfaces can change. Confirm your actual plan, configuration and the supplier’s latest notice. This guide does not certify the security or patch status of any individual environment.
Need help with your site?
We can help clarify the information and scope. Paid work begins after you approve the scope and cost.