Paragon Initiative Enterprises Blog

The latest information from the team that develops cryptographically secure PHP software.

Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.)

Paseto (Platform-Agnostic Security Tokens) is everything JWT should be, but isn't (namely, secure)


Our Ambitious Plan to Make Insecure PHP Software a Thing of the Past

Let's solve application security at an ecosystem level by updating outdated and/or insecure blog posts to refer developers to better practices.


Securing the PHP Community with Paragon Initiative Enterprises Hosted Services

Introducing PIE-Hosted Services to Help Further our Goals to Secure the Entire PHP Ecosystem


Certainty: Automated CACert.pem Management for PHP Software

Our new open source library, which keeps your Certificate Authority certificate bundle up-to-date.


On the (in)security of popular open source Content Management Systems written in PHP

An analysis of the deficits in the security features offered by WordPress, Drupal, and Joomla.


Crypto-misnomers: "Zero Knowledge" Considered Self-Descriptive

A dissection of the misnomers and bad ideas used in cryptography products.


Securing a PHP Application in 2016: The Pocket Guide

A quick guide to eliminating the common threats when developing PHP applications in 2016.


What's New in Defuse Security's PHP Encryption Library Version 2

Our contributions to defuse/php-encryption and how it affects future behavior


Go PHP 7 - Our Commitment to Maintaining our Open Source Projects

This is our promise to the community to support PHP 5 projects until EOL, and then no later.


Don't Fear the Hacker - The Missing First Step in Cybersecurity Plans

Or: How I learned to stop worrying and love software exploitation.


Need Technology Consultants?

Will tomorrow bring costly and embarrassing data breaches? Or will it bring growth, success, and peace of mind?

Our team of technology consultants have extensive knowledge and experience with application security and web/application development.

We specialize in cryptography and secure PHP development.

Let's Work Together Towards Success

Our Security Newsletters

Want the latest from Paragon Initiative Enterprises delivered straight to your inbox? We have two newsletters to choose from.

The first mails quarterly and often showcases our behind-the-scenes projects.

The other is unscheduled and gives you a direct feed into the findings of our open source security research initiatives.

Quarterly Newsletter   Security Announcements