hosting
SiteGround: security status
Summary
Official blog (Oct 21, updated 12:00 UTC Oct 22): before the release SiteGround deployed server-level mitigation rules on all servers and disabled the affected functionality on all supported PHP versions; once PHP released the fixes on Oct 21 it 'applied them across all SiteGround servers' and says customers need do nothing. Staff comments (Oct 22-23 and 26) say every PHP version in Site Tools, including 7.4, is covered whether Managed PHP or manually selected, and on Oct 26 that a site set to PHP 7.3.34 in the PHP Manager is also protected, while recommending a move to 7.4 or newer; they describe 7.3-8.1 as covered by 'server-level security mitigations' and do not say a code fix was applied to those.
Customer action:
SiteGround says no action is needed. Sites manually pinned to PHP 8.1 or older (e.g. 7.3 or 7.4) have no upstream fix, so consider switching to Managed PHP or 8.2+ in Site Tools.
Source: https://www.siteground.com/blog/critical-php-vulnerabilities-october-2026
Verified: 2026-10-29
SiteGround's servers run on Google Cloud (observed origins AS15169, AS19527, AS43515, AS396982). It is listed after google-cloud with Google's two cloud ASNs, so the name servers (ns1/ns2.siteground.net) identify SiteGround; a site that only points an A record to SiteGround shows as Google Cloud, and one in AS19527 or AS43515 as unmatched.
How this tool recognises the provider
- AS numbers
AS15169AS396982- Name servers
*.siteground.net