Read-only Porro connector for Laravel: versions, advisories, scheduler, queues, migrations and backups.

AST static analysis guard for Laravel multi-tenant SaaS applications preventing cross-tenant data leaks, cache collisions, and unscoped queries.

Security audit for Laravel 12 and 13 in one Artisan command: configuration, file storage, authentication and dependency checks with clear recommendations, CWE and CVSS.

Enterprise security, antivirus, webshell detection, WAF, file integrity, and quarantine suite for Laravel

Brute-force login protection for Laravel: progressive lockouts per IP and username, allow and block lists, events, alerts by mail, Slack or Telegram, and an audit log.

Comprehensive password strength analyzer, scoring engine, and validation rule package for Laravel.

Detect sensitive data and AI API key leaks in Laravel JSON responses with PHPUnit assertions, CLI scanner and optional middleware.

Official Laravel package for Shielda Captcha (پکیج رسمی شیلدا کپچا برای لاراول)

Reports a Laravel site's stack to Soilboard.

Guarded tools and assurance tests for Laravel AI agents: workspace isolation, honest failures and evidence on every tool call.

Extensible Laravel authentication package providing actions for login, logout, sign-up, password reset, email verification and related security features.

Opaque, rotating refresh tokens and device sessions for Laravel — SHA-256 at rest, atomic anti-double-spend rotation, family revocation on reuse. Zero third-party runtime deps.

Reports a Laravel app's installed Composer dependencies to NoDisrupt, so its packages can be matched against known vulnerabilities. For apps that can't be versioned remotely (Laravel Cloud, Vapor, Forge, self-hosted).

Laravel adapter for Ganadev Shield - adaptive application firewall.

A reusable, extensible CAPTCHA package for Laravel 10+ with image, math and text generators.

Generate least-privilege AWS IAM policies for your Laravel app and audit your AWS account, right from Artisan.

Production-ready defense-in-depth security firewall package for Laravel applications protecting against web threats, API abuse, malicious uploads, bots, and application-layer DoS.

Admin-panel-agnostic core for forcing two-factor authentication in any Laravel app: a shared bypass registry (compose several "skip 2FA" reasons) that the nova-force-two-factor and filament-force-two-factor adapters enforce.

Automated In-App Penetration Testing and DAST Security Audit Suite for Laravel

Multi-Factor Authentication package for Laravel with TOTP, Email OTP, and WebAuthn support

Detect and ban vulnerability-scanner traffic on Laravel apps, with optional ASN-level blocking via laravel-visitor-fingerprint

Laravel integration for kanopi/firewall: middleware, config, Artisan commands and event wiring.

Production correctness engine for Laravel applications.

Expose Eloquent models to an AI agent without handing it your database. Field allowlists, per-record policy checks, result ceilings and an audit trail, all failing closed.

Secure JWT authentication for Laravel with rotating refresh tokens, reuse detection, and revocation.

Secure, queued, and configurable OTP verification package for Laravel applications.

Defense-in-depth content security for Laravel: malware scanning, MIME/magic-byte verification, archive/image/PDF inspection, HTML sanitization, URL/SSRF checks, quarantine, audit trail and a Vue 3 security console.

Recursive, filter-based input sanitization for Laravel applications, with per-field rules and dot-notation support.

Enterprise Audit Trails & Compliance Logging for Laravel

Application-agnostic anti-bot protection for Laravel: risk-based scoring, sliding-window rate limiting, proof-of-work challenges, temporary blocking, and network-verified search engine crawler bypass (Googlebot, Bingbot, YandexBot).

Production-grade, modular, portable, and secure authentication package for Laravel applications.

Docker secrets, systemd credentials, and _FILE support for Laravel's env().

Laravel-native security and multi-tenancy analysis for development and CI.

Production-grade CSS and HTML class obfuscation library for Laravel applications.

Coverage reporting for your .env: static analysis for env() call isolation, .env.example drift, and secret heuristics.

Laravel adapter for funnypot: normalise the request, ask the funnypot-policy decision engine, execute the Decision (allow / log / block / deceive). Owns no decision logic.

A dynamic, request-aware CORS policy resolver for Laravel applications

Authorisation coverage reporting for Laravel applications. Statically scans routes, controllers, Form Requests, and Policies to report what is and is not protected.

Laravel package for trusted-device login approval and device-approval security workflows.

Automatic login activity tracking, device fingerprinting, and new-device alerts for Laravel applications.

Cbox Webhook Signature — verification-only webhook signature checking for Laravel, with drivers for GitHub, Stripe, Slack, Shopify, Standard Webhooks, Twilio, Mailgun and Postal. No migrations, no queue, no models. Secret rotation, replay protection and send-time outbound signing included.

Multi-source vulnerability lookups for PHP and Laravel — OSV, NVD, GitHub Advisories, MITRE, EUVD, CVE-Search, Red Hat, Shodan CVEDB, OSS Index, VulnCheck and Snyk behind one contract, with CVSS v2/v3/v4, EPSS/KEV enrichment, change detection and a self-audit command.

Reusable intrusion defence package for Laravel: known attack path detection, permanent IP blocking, public rate limiting, admin IP allowlists, one-time submission tokens and hardened security notifications.

Laravel middleware that restores the real client IP behind a CDN, load balancer or ingress controller that overwrites X-Forwarded-For, verified with a shared secret so the header cannot be spoofed.

Permission handling for Laravel 12 and up

Point-in-time static (and opt-in dynamic) diagnostic analysis for Laravel applications — configuration, schema, security, and codebase.

Laravel package for blocking suspicious IP addresses (anti-spam/anti-scanner). Supports nginx and Apache log parsing.

Generate clean, secure and configurable Laravel APIs from database tables.

Purpose-scoped, hashed, rate-limited one-time passwords for Laravel.

Password policy and lifecycle for Laravel: extended validation rule, blocklists, reuse prevention, expiration, compromise detection and notifications.