Upgrading to WHMCS 9 means PHP 8.2 or 8.3, Smarty 4 and newer ionCube Loader minimums. Most installs carry modules nobody has looked at in years. Examen reads every addon, server, gateway and registrar module, your hooks and your templates, and tells you which modules are Ready, Need review, are Blocked, or are encoded (so you know which vendors to ask) — before you upgrade, not after.

Upgrade readiness

• Finds functions removed or deprecated in PHP 8, legacy WHMCS database helpers, the old mysql_* API and Smarty tags removed in WHMCS 9, each with file, line and the fix.
• Checks your PHP version, ionCube Loader and PHP extensions against WHMCS 9's requirements.
• Recognises the modules that ship with WHMCS, so only third-party code is reported.

Security audit

• Default admin folder name, configuration.php permissions, an install folder left behind.
• attachments, downloads, templates_c and crons inside the web root.
• Administrators without two-factor authentication, API credentials without an IP allowlist, error display switched on.

Everyday use

• A readiness score and findings grouped by severity, with run history.
• Weekly scheduled scan from WHMCS's own daily cron, with an email summary.
• CSV and JSON export for your records or your developer.

Private by design

• Read-only: never changes a file, a setting or a database row outside its own tables.
• Never executes the code it scans and makes no outbound connections.
• Reads configuration.php without including it, and never reads your database password.

Free and open source (MIT) from Liquid Monks.