Introducing Reachability for PHP

Socket is launching experimental reachability analysis for PHP, letting security teams pinpoint which CVEs are actually exploitable in their codebase rather than chasing every advisory. The engine handles PHP's notoriously tricky dispatch patterns — magic methods, string-keyed service containers, Laravel facades — and resolves multi-hop call chains like the Guzzle CVE-2022-29248 to deliver accurate, function-level verdicts. Accuracy tops 90% on major frameworks like WordPress and PHPUnit.