Updates & Runtime Security
We handle the updates.You stay informed.
Transformable.app is a managed hosting service for your self-hosted infrastructure. Our team takes care of updates and follows up on known security issues. Updates and Runtime Security reports give you a clear view of the work we manage for you.
Any change to your server reports alerts both you and the Transformable.app team.
Updates Report
Pending patches, held packages, and restart status
Runtime Security
Known issues, detected versions, and advisory evidence
You and the Transformable.app team are notified. We handle updates and follow-up.
The evidence
Two reports. Better decisions.
Our team uses both reports to keep your infrastructure current and review security exposure. You can follow the status of your managed servers from the same reports.
What needs updating?
Updates Report
Our team tracks pending maintenance and issues that can prevent patches from taking effect. You can see that update status in your report.
- Available package and distribution updates
- Packages kept back and stuck updates
- Automatic update and unattended upgrade configuration
- Reboot requirements and the last update check
What needs security attention?
Runtime Security
Our team checks supported Forge servers for known issues in detected runtimes and website packages, using the evidence to guide fixes and follow-up.
- PHP package fixes and upstream support status
- PHP upload-progress configuration observations
- Node.js support and security release checks
- React and Next.js package checks for covered advisories
Inside the dashboard
See what the reports include.
Start with the summary on your Servers page, then explore the update status and detailed security findings. Open the report screenshots at full size to read the details.
The overview is a demo with sample data and current dates. Report screenshots show example versions, dates, and statuses.
Servers page overview
See runtime security and package update summaries alongside each server, with separate timestamps showing when each check ran. This sample row uses current dates. Scroll sideways on smaller screens to see the full row.
| NAME | FREE SPACE | SYSTEM STATS | IP ADDRESS | SECURITY STATUS | BESZEL STATUS | FORGE STATUS | Actions |
|---|---|---|---|---|---|---|---|
demo x86_64 / Ubuntu 24.04 | 34% | CPU:12.8% Mem:76.9% | 203.0.113.24 | No issues found in checked itemsLast checked: Not checkedNo package updates pending (0 packages)Package updates checked: Not checked | Loading date... | Loading date... |
Updates Report
Review Runtime Security status, system information, available and held packages, automatic update configuration, and system health in one report.
Runtime Security details
Explore individual PHP installations, upload-progress configuration, Node.js releases, and React or Next.js deployments, with check statuses and advisory sources.
Managed from finding to follow-up.
Our team takes responsibility for updates as part of your managed hosting service. Reports help us identify issues, prioritize maintenance, and follow through on the fixes.
Changes to your Updates and Runtime Security reports alert both you and our team. We handle the maintenance and can explain any finding or next step.
Report changes alert both of us
Any change to your server reports alerts both you and the Transformable.app team. We use update status and Runtime Security findings to identify pending maintenance and known security issues.
We review and prioritize
We review affected versions, advisory sources, check times, and scan coverage to decide which fixes and further checks need attention.
We handle the updates
Transformable.app manages package updates, application deployments, configuration changes, and any required service restarts as part of your managed hosting service.
We verify and follow up
After maintenance, our team checks the updated software and runs fresh security checks as needed. Your reports keep you informed about the results and anything still under review.
Useful findings need context.
We prioritize the actual finding
Our team reviews affected, potentially affected, and unsupported software. Declared versions and other context help explain a deployment without automatically proving a vulnerability.
We review the time and scope
Reports show when checks ran. Coverage explains skipped or unreadable items. Our team reviews unverified results and coverage gaps to determine what needs further investigation.
Keep the evidence in view
Detected versions, package details, and advisory sources guide our team as we manage fixes. PHP vendor backports are considered separately from upstream lifecycle status.
A few things to know
Who receives alerts when a server report changes?
Any change to your server's Updates or Runtime Security reports alerts both you and the Transformable.app team. You stay informed, and our team reviews the change and handles any updates or follow-up needed as part of your managed hosting service.
Who takes care of updates?
Transformable.app does. We provide managed hosting for your self-hosted infrastructure, including handling updates and the maintenance they require. The reports give you visibility into the work our team manages.
What is the difference between an update and a vulnerability?
An available update means a newer package is ready to install. It may contain bug fixes, features, or security patches. Runtime Security adds context by checking detected software against the known security issues and support rules covered by the report. An update count alone does not tell you how many vulnerabilities affect your server.
Does running a security check change my server?
The check itself collects information and produces a report. Our team uses the findings to manage any required patches, configuration changes, or service restarts as part of the hosting service.
How do the reports help as new vulnerabilities are discovered?
Transformable.app updates its security checks as new vulnerabilities are discovered. Our team uses fresh scans to evaluate detected software with the updated checks and manage the follow-up. Each saved report shows when its checks ran, so you can see how current the results are.
Does a clear report mean everything is secure?
A clear result means no issues were found in the items and advisories checked. It does not rule out every vulnerability. Containers need separate checks, and installed packages or saved configuration may differ from what a live application is using. Our team reviews coverage gaps, unreadable files, and unverified results to determine the follow-up needed.
Your infrastructure. Updates managed by us.
See the update status and Runtime Security results for your managed servers. Our team takes care of the updates and is here to answer questions about your reports.