NCSC EMERGENCY GUIDANCE — 21 OCTOBER 2026
Free PHP Vulnerability Audit for FileMaker Customers
If PHP is anywhere in your FileMaker estate, you need to act today. We're offering a free audit to any FileMaker customer — Neptune client or not.
- Official Claris Partner
- 2× Claris Excellence Award winner
- 30+ UK in-house specialists
WHAT HAPPENED
Critical PHP vulnerabilities
disclosed worldwide
Global emergency guidance
The UK NCSC, US NSA and agencies across the EU, Australia and Singapore have issued emergency guidance on newly disclosed PHP vulnerabilities.
Major sites taken offline
The BBC, Edinburgh Council, Wikimedia and a string of Scottish health boards have taken sites offline as a precautionary measure.
Patch or take it down
The advice is blunt: patch immediately, or take the system down until you can. The NSA says these flaws provide a 'direct path' to exploit databases.
Exploitation attempts rising
With technical details now public, more attempts to exploit these flaws are likely in the coming weeks.
HIDDEN RISK
Where PHP hides in
a FileMaker estate
The Claris Data API, OData and REST have replaced the FileMaker PHP API almost everywhere. But "rare" means there are still systems out there, quietly running, often with nobody left who remembers how they were set up.
FileMaker PHP API
For over a decade, the FileMaker PHP API was the way to connect FileMaker to the web. Most of it was built, worked, and was never touched again.
Customer portals & booking forms
Web-facing portals that let customers view records, book appointments or submit data often run on PHP.
Payment pages
Payment integrations and checkout flows sometimes use PHP middleware to connect to FileMaker.
WordPress or marketing site
Your company website may run on WordPress (built on PHP) and pull data from FileMaker.
Staff intranets
Internal tools and dashboards built years ago may still be running PHP to serve FileMaker data.
Integration scripts
Middleware scripts, scheduled jobs and API connectors that glue systems together.
WHAT WE CHECK
What the free
audit covers
We'll check your website, payment flows, integrations and any FileMaker PHP layer, tell you what's exposed, confirm whether it's patched, and look for signs of compromise.
Book your free audit- Inventory every PHP surface in your environment
- Confirm PHP version and patch state
- Review FileMaker Server web publishing configuration
- Check payment flows and external integrations
- Look for indicators of compromise and backdoors (per NCSC guidance)
- Provide a written summary with prioritised actions
- Recommend options to retire the PHP API in favour of the modern Data API or OData
OUR PROCESS
How it works
— three steps
Book
Fill in the form above or email us. We'll confirm your slot within one working day.
We audit this week
One of our certified consultants reviews your website, integrations and any FileMaker PHP layer.
You get the findings
A clear summary of what's exposed, whether it's patched, and what to do next — at no cost.
WHO IT'S FOR
Any FileMaker customer
Neptune client or not. UK and Ireland. No cost. No obligation. We'd rather you found out from us than from an attacker.
Trusted by everyone, from Global companies to local charities
WE WALK THE TALK
Testimonials.
Our Wall of Love.
Extremely satisfied. The team are extremely responsive, flexible, fast, and precise in all areas. We started together with a small project, and have since expanded the SoW significantly after the service and talent we got. 10/10, would recommend.
William Hill
CEO, Bascule Insurance Services LLC
Neptune provided an excellent professional, knowledgeable service and offer exceptional value to any project. Thank you to Jordan and the Team.
Darren Williams
Product Owner, Solotech
Working with Neptune has been an exceptional experience from start to finish. Their dedication, expertise, and swift execution in developing our system left me thoroughly impressed. The seamless communication and willingness to go the extra mile demonstrated their commitment to delivering excellence. Overall, my experience with Neptune has been nothing short of outstanding.
Jacquie Freear
Purchasing Manager,
Our team had a great experience working with Jordan and the Neptune team. They delivered exactly what we were looking for very quickly and smoothly. We ended up making a lot of changes to our design and they navigated that with ease. In the end we were very happy and would recommend them to anyone for their next project.
Lynsey Hamilton
Athlete, TeamGB
The team at Neptune did a fantastic job bringing our ideas and plans to life in FileMaker. Couldn't recommend highly enough, great to work with, super responsive and very accommodating to change!
Curtis Bligh
Head of Marketing,
Neptune is highly creative, diligent in research, and provides excellent suggestions. We have accomplished much and thoroughly enjoyed our real-time suggest-and-edit sessions. Neptunes' flexibility and adaptability have resulted in impressive productivity within tight time frames and with exceptional quality.
Craig Cameron
Head of R&D,
Neptune are the perfect partner for us to work with. We had in-house design and build capabilities but we needed a FileMaker Expert to come in and bring our ideas to life. Jordan and his team were able to take all our ideas on board and quickly iterate on any changes we requested to make the site everything we wanted!
Adam Eaton
Principle Engineer,
I highly recommend working with Neptune. The process is hugely collaborative and made the project a joy to work on. Their understanding of FileMaker is second to none and they always finds ways to solve challenges through creative design. They are organised, calm and diligent in their work, and will go above and beyond to deliver.
Mark Holden
Managing Director,
QUESTIONS
Frequently asked
questions
Still not sure? Get in touch and we'll answer any questions.
Ready to check your estate?
Book your free audit now.
Fill in the form or get in touch directly. We're booking audits this week.