Recent critical vulnerabilities affecting PHP have prompted urgent security updates and, in some cases, temporary service interruptions across web-based applications.

These incidents are a reminder that cybersecurity is an ongoing responsibility, particularly for platforms managing business-critical systems and operational data.

The Switch Platform's core application does not use PHP and is not affected by these PHP vulnerabilities.

Built on a Modern, Layered Architecture

Security starts with how a platform is designed.

Switch operates on Microsoft Azure, using a layered, cloud-based architecture that separates the user interface, application services and underlying data.

Our browser interface is developed using JavaScript and Vue, communicating with a .NET backend through APIs. Backend services manage business workflows, data processing and storage, with access controls enforced server-side.

This separation provides a structured approach to managing access to platform functionality and operational information, rather than relying on protections within the browser alone.

Security Is More Than Technology Choices

Choosing the right technology stack is only one part of protecting a platform. Security also requires continuous monitoring, preventative controls and a disciplined approach to identifying and addressing vulnerabilities.

Switch incorporates several important safeguards:

• Monthly security scans to identify potential vulnerabilities and guide remediation.
• Multi-factor authentication (MFA) to provide an additional layer of protection for account access.
• Content Security Policy (CSP) to restrict which scripts and resources can load within the browser, helping reduce exposure to certain web-based attacks.
• Server-side access controls to enforce permissions independently of the user interface.

These measures work together to reduce risk and strengthen the security of the platform.

Protecting the Systems Our Customers Depend On

Building operations increasingly rely on connected systems, cloud platforms and real-time operational data. As connectivity grows, so does the importance of maintaining strong cybersecurity practices.

At Switch, security is not a one-time implementation or a feature added after development. It is an ongoing responsibility embedded in how we design, operate and maintain our platform.

We continue to monitor emerging threats, review our security controls and strengthen safeguards to protect the building portfolios, operational data and workflows our customers depend on.

Our commitment is simple: deliver a reliable, secure platform that customers can trust to support their building operations.