Paragon Initiative Enterprises Blog

The latest information from the team that develops cryptographically secure PHP software.

CipherSweet: Searchable Encryption Doesn't Have to be Bitter

CipherSweet is a PHP library that provides searchable encryption for the most common cases a web developer is likely to encounter.


Our PHP Security Roadmap for the Year 2019

We have a lot of work ahead of us in 2019, and we hope it benefits the entire PHP community


Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.)

Paseto (Platform-Agnostic Security Tokens) is everything JWT should be, but isn't (namely, secure)


Our Ambitious Plan to Make Insecure PHP Software a Thing of the Past

Let's solve application security at an ecosystem level by updating outdated and/or insecure blog posts to refer developers to better practices.


Securing the PHP Community with Paragon Initiative Enterprises Hosted Services

Introducing PIE-Hosted Services to Help Further our Goals to Secure the Entire PHP Ecosystem


Certainty: Automated CACert.pem Management for PHP Software

Our new open source library, which keeps your Certificate Authority certificate bundle up-to-date.


On the (in)security of popular open source Content Management Systems written in PHP

An analysis of the deficits in the security features offered by WordPress, Drupal, and Joomla.


Crypto-misnomers: "Zero Knowledge" Considered Self-Descriptive

A dissection of the misnomers and bad ideas used in cryptography products.


Securing a PHP Application in 2016: The Pocket Guide

A quick guide to eliminating the common threats when developing PHP applications in 2016.


What's New in Defuse Security's PHP Encryption Library Version 2

Our contributions to defuse/php-encryption and how it affects future behavior


Need Technology Consultants?

Will tomorrow bring costly and embarrassing data breaches? Or will it bring growth, success, and peace of mind?

Our team of technology consultants have extensive knowledge and experience with application security and web/application development.

We specialize in cryptography and secure PHP development.

Let's Work Together Towards Success

Our Security Newsletters

Want the latest from Paragon Initiative Enterprises delivered straight to your inbox? We have two newsletters to choose from.

The first mails quarterly and often showcases our behind-the-scenes projects.

The other is unscheduled and gives you a direct feed into the findings of our open source security research initiatives.

Quarterly Newsletter   Security Announcements