PHP is only the latest example of the problem, your language could be next.
Oct 26, 2026
PHP isn't the problem. PHP has had an unfortunate week. This isnt the the only critical vulnerability they've had but it's one of the worst. These…
// BLOG
Security research, product updates, and practical guidance.
Oct 26, 2026
PHP isn't the problem. PHP has had an unfortunate week. This isnt the the only critical vulnerability they've had but it's one of the worst. These…
Sep 3, 2026
From all appearances, it seems founders have a tough time naming their companies. Look around you, particularly in tech; the naming landscape is very…
Aug 4, 2026
Every API scanner on the market covers REST. That is table stakes, and it is also where most protocol coverage ends. Your APIs are already speaking five…
Jul 31, 2026
NewScan's scan has two halves: a deterministic floor that always runs, and an optional AI pass on top. The AI pass costs money per scan, so we had a…
Jul 25, 2026
Somewhere in almost every API scan report there is a finding that reads like this: Blind SQL injection — POST /api/coupons/validate , parameter code .…