← All help articles

Shared-hosting agent (PHP) — install and configuration

The PHP agent is a drop-in script for shared hosting (cPanel, Plesk) where you don't have SSH root access or the ability to run a compiled binary. It only needs PHP 7.4+ with the curl, sodium, and json extensions — the default on almost every mainstream host since 2020.

Quick install

  1. Dashboard → Integrations → Shared-hosting agent (PHP) to find your license key.
  2. Upload the agent script to your hosting account (via File Manager or FTP).
  3. Add the license key to the agent's config and schedule it as a cron job (once per minute is recommended).

What it checks

  • Heartbeat — once per minute, so the dashboard shows the host online.
  • WordPress detection — finds every install under public_html/, www/, or htdocs/, reports its version.
  • Cron audit — lists crontab entries and flags risky patterns (e.g. curl ... | bash).
  • File-permission sweep — flags world-writable files and world-readable secrets (.env, wp-config.php, etc.), bounded to keep shared-host limits happy.
  • Disk usage and PHP runtime — top directories by size, PHP version and extensions, end-of-life warnings.

Every finding ships with both a technical description and a plain-English one, plus business-friendly remediation steps.

Got root on a VPS instead?

Use the Go agent — it has more depth (package updates, systemd integration) that shared hosting doesn't allow.