The Detection
Grab is Southeast Asia's most prominent super-app. Ride-hailing, food delivery, payments, insurance — serving millions daily across 8 countries. Our scanner detected WordPress on grab.com.
The Nuance
It's important to be precise about what we detected. Our scanner identifies the framework powering the public-facing marketing website — grab.com. Grab's actual ride-hailing, payment, and delivery infrastructure is almost certainly built on modern custom systems. The WordPress detection is for the marketing/corporate site, not the core platform.
But that distinction matters less than it seems. The marketing site is where potential drivers sign up, where corporate partnerships begin, where investors land. It's the digital front door — and it's on a framework with 18,005 CVEs.
The Industry Pattern
Our SE Asia scan found a split: Gojek runs Next.js (modern). Grab runs WordPress (legacy). Singapore government runs Next.js (modern). Malaysian media runs Drupal (legacy). The region is divided, and the divide follows organizational digital maturity more than geography.
