Security update · 23/10/2026
Our applications and the PHP security alert
Over the past two days, governments and security agencies worldwide have issued a critical alert about two serious vulnerabilities in PHP, a programming language used by a large share of websites. Several organisations have taken sites offline while they apply the fix.
What this means for you
WerkDone’s applications are not built on PHP. We have checked our application code and infrastructure, and found no PHP in the systems we build and operate. This alert does not affect them, and no action is needed from you.
How we keep our applications secure
This alert is a reminder of why we treat security as ongoing work, not a one-time checklist.
Constant hardening
We keep our software and dependencies up to date, and review access controls and data protection on every product as part of normal delivery.
Monitoring
We monitor our applications continuously, with 24/7 response for critical incidents.
Built for Singapore’s standards
Our products are designed around PDPA obligations and, for healthcare products, the MOH Cyber Security Essentials controls.
Prompt communication
If a vulnerability ever does affect a product you use, we will tell you what happened, what we did about it, and what, if anything, you need to do.
If you have questions about your own deployment, contact your WerkDone project lead or write to enquiry@werkdone.com.