Open-source, cross-platform (Linux and Windows) PHP RCE mitigation agent and HTTP WAF. Blocks php2shell session.upload_progress use-after-free exploits (CVE-2026-109618, CVE-2026-109619), session file poisoning, serialized handler mismatch, worker pinning/ASLR bypass, SAPI OOM bailout and PHP-CGI argument injection (CVE-2024-4577).