Snapshot 219439
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview At Graphwise, trust is at the core of everything we do. We are committed to maintaining the highest standards of information security, privacy, and quality in our services. Our Commitment to Security and Privacy Graphwise implements a robust Information Security, Privacy, and AI Management System (ISMS, PIMS, AIMS) designed to protect your data and ensure the confidentiality, integrity, and availability of our services. Our systems are built upon industry best practices and continuously reviewed and improved. Compliance EU AI Act GDPR ISO/IEC 27001:2022 ISO/IEC 27701:2019 ISO/IEC 42001:2023 Microsoft SSPA NIS2 SOC 2 Type 2 SOC 3 Graphwise is reviewed and trusted by Sensiba LLP CIS Secmentis Documents REPORTSPenetration Test Report REPORTSSecurity Whitepaper REPORTSSOC 2 Type 2 Report REPORTSSOC 3 Report COMPLIANCEGDPR COMPLIANCEISO/IEC 27001:2022 COMPLIANCEISO/IEC 27701:2019 COMPLIANCEISO/IEC 42001:2023 COMPLIANCESOC 2 Type 2 COMPLIANCESOC 3 APP SECURITYApplication Penetration Testing AIAI Security Risk Profile Third Party DependenceYes HostingMajor Cloud Provider Product Security Audit Logging Data Security Multi-Factor Authentication Reports Penetration Test Report Security Whitepaper SOC 2 Type 2 Report View more App Security Application Penetration Testing Software Development Lifecycle Vulnerability & Patch Management AI Graphwise AI Policy AI Security Responsible AI Statement ESG Anti-Bribery and Corruption Anti-Competitive Practices Code of Conduct View more Legal Subprocessors Cyber Insurance Privacy Policy View more Data Privacy Cookies Data Breach Notifications Employee Privacy Training Training Employee Privacy Training Phishing Training Security Awareness Training Knowledge Base (FAQ) How are access controls (RBAC/ABAC) maintained across the semantic knowledge graph? Is customer data used to train public or foundational LLM models? How does Graphwise comply with the EU AI Act and global Responsible AI standards? How is customer data protected in transit and at rest? How does Graphwise prevent LLM hallucinations and ensure factual accuracy? View more Trust Center Updates PHP Remote Code Execution PHP2Shell CVE-2026-109618 & CVE-2026-109619 and Graphwise Platform Status Vulnerabilities Dear Recipient, We are reaching out to provide transparent updates regarding the recently disclosed global PHP vulnerability and its impact on Graphwise. Status Overview Graphwise Platform: Fully Secure. The core Graphwise platform is built entirely on Java technology and is not affected by this vulnerability. Business Operations: Uninterrupted. There is no impact on service delivery, business continuity, or the availability of your customer-facing services. Incident & Response Details Upon disclosure of the global PHP vulnerability, Graphwise took immediate action to protect our infrastructure: Isolation: A small number of non-critical PHP-based servers (hosting our company website and select demo applications) were taken offline immediately as a precaution. Investigation & Remediation: Forensic investigations were conducted, and security patches were successfully applied to resolve the vulnerability. Current Findings: To date, our investigations have detected no security breaches or unauthorized access to our systems. Ongoing Security Measures The necessary patches have been fully deployed, and our Security Operations Center (SOC) continues active monitoring via SIEM tools to ensure complete environment integrity. If you have any questions or require additional security information, please do not hesitate to reach out to our support team. Questions Whether your organization is affected by this vulnerability? Yes. The vulnerability impacted a limited number of our internal servers running affected versions of PHP. Which systems or services may be impacted? This issue was strictly limited to internal systems. The products and services provided to you do not rely on PHP and were completely unaffected. Whether any mitigation measures have already been implemented or are planned? As an immediate mitigation measure, all systems running PHP were identified following the disclosure. Available patches were applied right away, while any unpatched servers were taken offline as a precaution. Once the relevant patches were released and applied, those systems were restored. All affected systems where the patches are available are now patched. The remaining systems need individual approach and will be brought online once work on them is complete. Whether you currently anticipate any impact on service delivery or business continuity? We do not anticipate any impact on service delivery or business continuity, and our services to you have remained fully operational throughout.