News and Insights Updates and thoughts from our team The AI Vulnerability Storm Is Coming. Here’s What SaaS Teams Need to Know. Posted on24 April 202624 April 2026 A group of the most credible voices in cybersecurity just published a document that deserves your full attention. The “AI […] Learn more What Happens During a Web Application Penetration Test? A Plain-English Walkthrough Posted on22 April 202624 April 2026 It’s not uncommon for teams to commission a pen test (particularly their first one) without really knowing what’s about to […] Learn more Foundations First: phew’s Story Posted on1 April 20261 April 2026 Since phew was founded, our focus has been on building a business grounded in quality. That meant investing heavily in […] Learn more Security Budgets & Why They Matter Posted on27 August 202427 August 2024 Did you spend 0% of your website’s budget on security? What about your new web application, new API, or even […] Learn more Where Are Your Hackers Located? Posted on16 May 202416 May 2024 Interestingly it doesn’t really matter. The thing to know is that they’re not located anywhere in particular. Or rather, wherever […] Learn more Do You Test Pens? Posted on3 April 202427 March 2025 Do You Test Pens? “Literally, what do you do all day?” That’s a question we get from time to time, […] Learn more Why caring is important in security Posted on12 March 202412 March 2024 Why caring is important in security When I started phew, I had very clear intentions about building a solid reputation […] Learn more The phew Top Ten Greatest Hits (…Of Vulnerabilities) Posted on18 October 202218 March 2025 First Up, The OWASP Top 10 Many of you who work or have backgrounds in web application development or cyber […] Learn more phew joins Government Marketplace for Information Security Professional Services Posted on6 September 20226 September 2022 We are delighted to announce that phew has been recognised as an approved supplier of security services on the New […] Learn more