Juniper Websites: PHP Security and Your Juniper Website

Juniper Websites

Following the Department for Education’s request for schools to seek assurance from their suppliers about the PHP security issue, we wanted to give you a clear update on your Juniper-hosted website.

Your school website can remain online. You do not need to take it offline or make any technical changes yourself.

Our technical team has confirmed that the necessary protective work has been completed for our website services.

To address the points raised by the DfE:

  • Assessment: We have reviewed our school website platforms and the infrastructure supporting them to identify where PHP is used and where action was needed.
  • Security updates: We have completed the security updates and protective measures needed to address the identified risks, including those affecting supporting components that use PHP.
  • Security guidance: We continue to monitor and implement all guidance and recommendations from the NCSC.

Our teams are continuing to check and monitor these services. If we need you to take any action, we will contact you directly.

We know schools need clear information they can share with their IT teams, trusts and governors. You can retain this email as our response to the DfE’s request for supplier assurance about your Juniper-hosted website.

You can also read our wider update here: https://junipereducation.org/resource/news/php-security. 

If you have any questions, please contact support.jw@junipereducation.org. Thank you to everyone who has contacted us while this work has been underway.

Follow our Juniper Websites' Status Updates page for further updates.

Further information about the wider issue is available from the National Cyber Security Centre.

Updated