SIX TOOLS / THE FULL RECORD
Final: php2shell
Final: php2shell
None caught php2shell. Codex Security spent 83.4 minutes on PHP. The Claude plugin spent 25.0 minutes and reported one finding in a session handler that needs a non-default build, a different weakness.
| Tool | Target | Run | Result | Other findings | Minutes | List-price US$ |
|---|---|---|---|---|---|---|
| Claude Code's security plugin | php | run1 | missed | 0 | 25.0 | 44.17 |
| /security-review | php | run1 | missed | 1 | 7.2 | 3.77 |
| Codex Security | php | run1 | missed | 8 | 83.4 | 60.37 |
| Plain Claude Code | php | run1 | missed | 0 | 31.0 | 9.31 |
| Plain Codex | php | run1 | stopped by OpenAI's safeguard | 0 | 3.5 | 0.42 |
| Plain Codex | php | run2 | stopped by OpenAI's safeguard | 0 | 4.0 | 0.45 |
| Plain Codex | php | run3 | stopped by OpenAI's safeguard | 0 | 6.0 | 0.54 |
| Semgrep | php | run1 | missed | 0 | 0.1 | not measured |
| Semgrep | php | run2 | missed | 0 | 0.1 | not measured |
| Semgrep | php | run3 | missed | 0 | 0.0 | not measured |