Critical PHP security vulnerability: Why People Experience Hub's employee survey platform is unaffected

When organisations choose an employee survey platform, the conversation understandably tends to focus on the things they can see: surveys, dashboards, reporting and insights.

But what sits behind the platform matters just as much.

The UK’s National Cyber Security Centre (NCSC) has highlighted critical security vulnerabilities affecting PHP and advised organisations to identify affected systems and take appropriate action.

Naturally, when your employee survey platform is responsible for holding sensitive employee feedback and organisational data, news like this matters.

So, we wanted to provide some reassurance about People Experience Hub.

Our employee survey platform does not use PHP

People Experience Hub is built exclusively on a modern technology stack. We do not use PHP in any part of our product or infrastructure.

Following the NCSC advisory, we have reviewed our environment and can confirm:

• No services are affected by these PHP vulnerabilities.
• No remediation has been required because PHP is not present within our environment.
• There has been no impact on service availability, platform security or client data.
• No action is required from People Experience Hub clients or partners.

A question worth asking your employee survey provider

The latest NCSC guidance is a timely reminder that the technology behind your employee survey platform matters, particularly when it is responsible for handling sensitive employee feedback and organisational data.

If your organisation uses another employee survey platform, it’s worth checking whether PHP forms part of its technology stack and, if so, what action has been taken in response to the latest vulnerabilities.

For People Experience Hub clients, the answer is straightforward: our platform does not use PHP and is unaffected by these vulnerabilities.

Keeping employee data safe

Nick Court, CEO of People Experience Hub, said:

"Data security and platform resilience are our highest priorities. By intentionally building People Experience Hub on a modern technology stack and avoiding legacy languages, we ensure that our infrastructure remains highly secure and insulated from these types of language-specific vulnerabilities. Our clients can have complete peace of mind that their services and data remain safe, secure, and fully operational."

People Experience Hub remains committed to maintaining high standards of cyber security and will continue to monitor NCSC advisories to ensure ongoing, proactive protection for our users.

Because when you're trusting an employee survey platform with your people’s feedback and organisational data, what sits behind the platform matters just as much as what you see on the dashboard.