Brute-force login protection for Laravel: progressive lockouts per IP and username, allow and block lists, events, alerts by mail, Slack or Telegram, and an audit log.