Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

SOCWarden security observability SDK for Laravel — detect brute force, impossible travel, credential spray, and more from one API call.

Agentic Governance Layer for Laravel 13

A Laravel package for website health monitoring, IP threat detection, traffic analysis and auto-banning.

Kanbino Health endpoint for Laravel — emits stack profile + extensible probes for uptime + security advisory matching

Laravel wrapper for voku/anti-xss — Facade, service, validation rule, middleware and Blade directive to sanitize XSS in strings.

Build Laravel Vite assets inside a hardened Apple Container.

Modern security headers for Laravel — turn-key. Strict CSP with per-request nonces and 'strict-dynamic', Subresource Integrity with smart noise filtering, HSTS, Permissions-Policy. An interactive setup wizard asks which third parties you use (GTM, HubSpot, Stripe, reCAPTCHA, and a dozen more) and wires the right directives automatically. First-party violation reporting endpoints, Filament + Livewire + Vite friendly, Vapor-ready. Laravel 11, 12, 13 on PHP 8.2+.

A Laravel Health check for npm audit advisories.

A robust, security-hardened, and performance-optimized privilege/permission management system for Laravel applications with menu-based access control.

A Laravel package to monitor Composer dependencies for security vulnerabilities

Enterprise Runtime Security Platform for Laravel Applications

A Laravel package for file type detection using Google Magika AI.

A powerful security scanner for Laravel applications with CLI and web dashboard support to detect vulnerabilities like SQL Injection, XSS, secrets, and misconfigurations.

Lightweight Laravel bot protection middleware that detects and blocks automated attacks based on velocity, honeypots, header anomalies, and behavioral patterns.

Laravel Session theft protection via client fingerprinting — auto-invalidates sessions used from unrecognized devices.

x-lock bot protection middleware for Laravel

Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.

Permissions-Policy (Feature-Policy) header builder and middleware for Laravel

Laravel package for hybrid encryption (RSA-OAEP + AES-256-GCM) for secure API request handling

A native, local-first security middleware for the Laravel AI SDK with bidirectional pseudonymization, prompt injection defense, and real-time Pulse telemetry.

Laravel package that adds an is_admin column to the users table and provides a middleware to protect admin-only routes.

Enterprise-grade Laravel security package providing WAF firewall protection, rate limiting, bot detection, honeypot traps, IP geo-blocking, CSRF/XSS/SQLi defence, API gateway security, real-time threat monitoring, malware scanning, and a built-in security dashboard — all configurable via a single config file.

A Laravel package to automatically capture and track IP addresses on Eloquent model actions such as signup, login, update, and deletion.

🔥 Advanced Security Package for Laravel 12 - The most comprehensive security solution for Laravel applications

Protect your Laravel app from AI scrapers, LLM crawlers, and prompt injection attacks

Reversible identifier obfuscation for Laravel projects (obfuscate locally, deobfuscate on trusted server with same key).

Static analysis CLI and MCP server for Laravel projects — zero dependencies, pure PHP 8.2+

AI-assisted security auditor and CTF generator for Laravel, with a deterministic, zero-cost access-control engine. Every claim backed by evidence.

Passive intrusion detection for Laravel. Logs SQL injection, XSS, scanners and probes for exposed AI infrastructure, flags prompt injection aimed at your LLM, and ranks attackers. Never blocks a request.

Laravel middleware for comprehensive security headers including CSP with nonce support, HSTS, and Permissions-Policy

Tamper-evident audit ledger for Laravel applications.

1, 755 engineering checks for secure, correct, auditable Laravel applications — with git hooks and merge protection

A driver-based secret manager for Laravel — injects secrets from OS keychains into your environment at runtime.

Just a package to quickly check if your app is tampered with.

SQL injection prevention plugin for laravel

CLI agent-like tool that analyzes Laravel projects for architecture, quality, security, documentation and DX

Laravel teapot to trap vulnerability scanners and integrate with fail2ban via HTTP 418

A Laravel package for automated monitoring of security vulnerabilities and outdated packages in Composer and NPM dependencies.

Single-use CAPTCHA for Laravel with anti-replay protection

A powerful, multi-tenant capable permission handling package for Laravel with role-based access control, wildcard permissions, high-performance caching, and complete domain/subdomain-based tenancy support.

Multi-channel application context management for Laravel with JWT and API Key authentication

Health-Check & Audit Tool for Composer Dependencies - Find out which packages are well-maintained, secure, and which ones to avoid.

Secure file encryption and decryption for Laravel applications

HMAC API authentication for Laravel with signature verification, replay attack prevention, and rate limiting

Domain-oriented authorization core for Laravel Passport, providing structured scope and permission modeling without UI or OAuth flow implementation.

Laravel 2FA package using email OTP codes with InertiaJS support

Validate Blade templates for syntax errors, security issues, and best practices

A security-focused runtime monitoring and guard layer for Laravel applications

Core helpers and request security tools for Laravel