Software security never stands still. New vulnerabilities are discovered, existing techniques evolve and the software components modern platforms depend on are continuously changing.
Recent developments within the PHP ecosystem are another reminder of how quickly the security landscape can change.
At EDUos Web, we have therefore reviewed the relevant components across our platform and, where necessary, updated them to current, supported and security-reviewed versions.
But for a platform used every day by many students, teachers and educational organisations, security cannot depend on updates alone.
Security consists of multiple layers
Our approach combines prevention, continuous monitoring, observability and rapid response.
Across the EDUos platform, we use technologies including Aikido Security, Sentry, Laravel Nightwatch and centralised SIEM monitoring, together with specialised logging, audit capabilities and additional security controls.
Each layer provides our teams with a different perspective on the platform.
Aikido Security, for example, helps us identify vulnerabilities, dependency risks and potential security issues within our software supply chain.
Sentry provides visibility into application errors, frontend behaviour and performance issues.
With Laravel Nightwatch, we can gain deeper observability into our Laravel backend, including requests, database queries, queues, jobs and other application activity.
Our SIEM monitoring brings security-relevant events from different parts of our environment together in a centralised system, allowing events to be correlated, investigated and acted upon more effectively.
Turning individual signals into insight
By combining these different systems, our teams can gain better visibility into areas such as:
security advisories and vulnerabilities;
dependency and package risks;
application errors and unexpected behaviour;
backend performance issues;
database and queue behaviour;
security-relevant events and anomalies;
critical system activity;
overall platform stability and performance.
A single alert does not always tell the complete story.
By bringing signals from different layers together, we gain a much clearer understanding of what is happening across our environment. This allows our teams to investigate causes more effectively and respond faster when something requires attention.
AI is changing security as well
AI is accelerating the way software is developed. At the same time, AI-powered techniques are increasingly able to analyse software and discover potential vulnerabilities faster.
Security and observability practices therefore need to evolve at the same pace.
That is why we continue investing throughout the EDUos ecosystem in automated security checks, dependency management, application observability, centralised security monitoring, audit logging and rapid incident response.
The goal is not only to prevent problems, but also to understand what is happening as quickly as possible when something unexpected does occur.
Security is not a one-time update
Keeping software up to date is important, but it is only one part of a strong security approach.
For us, security is a continuous process of:
prevention, detection, understanding, response and improvement.
By continuously repeating that cycle, we work every day towards a safer, more stable and more observable EDUos platform for the educational organisations, students and teachers who rely on it.