Completed -
The scheduled maintenance has been completed.
Oct 25, 17:39 GMT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 25, 17:00 GMT
Scheduled -
We'll be carrying out essential maintenance on Sunday 25 October between 17:00 and 18:00 GMT to upgrade our database. (UK clocks go back on the morning of 25 October, so this time is in GMT.)
During this time, Signable will be unavailable. This includes the web app, signing pages and API. We expect the work to take up to one hour, and services will return automatically once it's complete.
Signable services will be unavailable during the maintenance period. - Any attempts to access Signable's platform may result in an error message. - The maintenance is expected to be completed within 1 hour, after which normal service will resume.
Why the Maintenance is Necessary: This maintenance is crucial for ensuring the reliability of our services. We are committed to providing you with a secure and efficient platform, and these updates are essential to achieving that goal. If you have any urgent concerns or questions, please contact our support team at [help@signable.com].
Oct 2, 12:08 BST
Resolved -
On 21 October, two critical vulnerabilities in PHP, known as "PHP2Shell", were disclosed. PHP is a widely used programming language, and these vulnerabilities affected organisations worldwide. We'd like to explain what this meant for Signable and how we responded.
Parts of the Signable platform, including our API and websites, use PHP. We began tracking the vulnerabilities on the morning of 21 October, before security patches were available, and established a dedicated team to coordinate our response.
As a precaution, we removed public access to our internal tools, introduced additional web application firewall protection and monitored our systems for signs of attempted exploitation.
When the PHP project released security patches that afternoon, we immediately began updating our production systems. All customer-facing Signable services were fully patched by 18:40 BST on 21 October.
Our investigation has found no evidence that these vulnerabilities were exploited against Signable. We are completing a further review of our logs against the latest threat intelligence and will contact affected customers directly if our findings change.
No action is required from customers, and Signable services remained available throughout.
As an additional precaution, we are introducing further firewall protections through our hosting provider and reviewing our response to identify opportunities for improvement.
If you have any questions or require further information for a vendor security assessment, please contact help@signable.com.
Oct 21, 19:00 BST
