Calling attention to the importance of maintaining websites operated by Japanese companies, AVII IMAGEWORKS released a free diagnostic tool that allows companies to check the current condition of their own websites following the disclosure of a critical PHP vulnerability in October 2026.
Websites operated by Japanese companies can become targets of attack even if they do not handle customer information, exposing them to risks such as website tampering, redirecting visitors and misuse of servers. This article explains the need for vulnerability countermeasures and emphasizes that understanding the operational structure is directly linked to ongoing protection.
The critical PHP vulnerability is not specific to WordPress. Countermeasures must be tailored to the PHP version in use and the server configuration, making it important to understand the condition of the entire operating environment.
As a starting point for understanding the maintenance status of a company's own website, the representative of AVII IMAGEWORKS developed and released a free “Website Security Diagnostic Tool.” Users can obtain diagnostic results from outside the site simply by pasting its URL, and the tool does not require an administrative console password to display the results.
The tool covers 8 areas, including HTTPS, security headers, PHP support status, WordPress information, searchability, accessibility, page speed, servers, domains and privacy. The results are provided in a detailed PDF that can be used as a basis for discussions with the person responsible for maintenance.