Enterprise Audit Trails & Compliance Logging for Laravel

Application-agnostic anti-bot protection for Laravel: risk-based scoring, sliding-window rate limiting, proof-of-work challenges, temporary blocking, and network-verified search engine crawler bypass (Googlebot, Bingbot, YandexBot).

Production-grade, modular, portable, and secure authentication package for Laravel applications.

Docker secrets, systemd credentials, and _FILE support for Laravel's env().

Laravel-native security and multi-tenancy analysis for development and CI.

Production-grade CSS and HTML class obfuscation library for Laravel applications.

Coverage reporting for your .env: static analysis for env() call isolation, .env.example drift, and secret heuristics.

Laravel adapter for funnypot: normalise the request, ask the funnypot-policy decision engine, execute the Decision (allow / log / block / deceive). Owns no decision logic.

A dynamic, request-aware CORS policy resolver for Laravel applications

Authorisation coverage reporting for Laravel applications. Statically scans routes, controllers, Form Requests, and Policies to report what is and is not protected.

Laravel package for trusted-device login approval and device-approval security workflows.

Hardware-bound cryptographic licensing and anti-piracy security package for Laravel applications.

Health checks for hosts, servers and web services in Laravel. HTTP, TLS, TCP, DNS, security headers and a normalized health score.

A production-grade, security-hardened media management & resumable chunked file upload package for Laravel with a zero-dependency SPA dashboard and mobile REST API support.

Security-first Cloudflare Access (Zero Trust) authentication for Laravel

Automatic login activity tracking, device fingerprinting, and new-device alerts for Laravel applications.

Cbox Webhook Signature — verification-only webhook signature checking for Laravel, with drivers for GitHub, Stripe, Slack, Shopify, Standard Webhooks, Twilio, Mailgun and Postal. No migrations, no queue, no models. Secret rotation, replay protection and send-time outbound signing included.

Multi-source vulnerability lookups for PHP and Laravel: OSV, NVD, GitHub Advisories (registry + repository), EUVD, CVE-Search and Snyk behind one contract.

Composable DDD Specifications and Query-Based Row-Level Security (RLS) Repositories for Laravel 13

Laravel-native security telemetry, WAF monitoring, posture checks, and DAST context for Cybear

Reusable intrusion defence package for Laravel: known attack path detection, permanent IP blocking, public rate limiting, admin IP allowlists, one-time submission tokens and hardened security notifications.

Laravel middleware that restores the real client IP behind a CDN, load balancer or ingress controller that overwrites X-Forwarded-For, verified with a shared secret so the header cannot be spoofed.

Permission handling for Laravel 12 and up

Point-in-time static (and opt-in dynamic) diagnostic analysis for Laravel applications — configuration, schema, security, and codebase.

Laravel package for blocking suspicious IP addresses (anti-spam/anti-scanner). Supports nginx and Apache log parsing.

Generate clean, secure and configurable Laravel APIs from database tables.

Purpose-scoped, hashed, rate-limited one-time passwords for Laravel.

Password policy and lifecycle for Laravel: extended validation rule, blocklists, reuse prevention, expiration, compromise detection and notifications.

رمزگذاری امن سورس‌کد PHP در پروژه‌های Laravel/Lumen با مدیریت کلید مبتنی بر Master Key + HKDF

Laravel integration for PulseProof Sentinel Protocol (PPS).

Password rotation for any Laravel app (no admin panel required): force any authenticatable to rotate its password every N days, with reuse prevention, a first-login gate, expiry warnings and a redirect middleware.

SSRF prevention for Laravel. Protect Http::, Guzzle, and validate user-supplied URLs against server-side request forgery.

Device management, logout other devices and new-device alerts for Laravel — without giving up your cache-based session driver.

PURL to CPE conversion for Laravel, backed by the curated scanoss/purl2cpe database. Ships ~47k reduced mappings so you can resolve NVD CPEs for a Package URL out of the box.

Package URL (purl) for Laravel — parse, build, normalize and validate purls per the spec, plus registry/repository/download URL resolution, ecosystem mapping, and CPE-friendly helpers.

Intelligent Adaptive Rate Limiter & Security Shield for Laravel - Advanced threat detection, behavioral analysis, fingerprinting, and auto-hardening protection.

Multi-Factor Authentication package for Laravel with TOTP, Email OTP, and WebAuthn support

The SIEM log-streaming delivery engine for Laravel — a durable transactional outbox, queued batched delivery with retry/backoff/dead-letter/circuit-breaker, SSRF-guarded HTTP egress, encrypted destination secrets, and PII redaction, on top of the framework-agnostic cboxdk/siem core.

Cbox Risk — an explainable, config-driven request risk-scoring pipeline for Laravel. Weights signals (IP reputation, geo, disposable email, velocity, bot timing) into a score and an outcome: allow, challenge, step-up, or reject.

Cbox SSRF — a hardened, config-driven guard against server-side request forgery for outbound URLs in Laravel. Blocks private/reserved/cloud-metadata targets, pins DNS, and refuses redirects.

PostgreSQL Row-Level Security for Laravel

A comprehensive cybersecurity package for Laravel providing Identity Management, Zero Trust, SIEM, Endpoint Security, and more.

AI-powered code analysis, security auditing, and health reporting for Laravel applications

Fingerprint, browser tracking and lightweight page movement tracking for Laravel.

SSL, SSH, secret, and configuration security posture monitoring for Laravel applications.

Laravel Security & Audit Scanner by Skycoder

An abuse firewall for AI endpoints: detect runaway agent loops within a request, and open a circuit on a per-tenant spend anomaly, before a self-recursing agent drains the API budget. Security-framed, not just rate limiting.

Static analysis for insecure AI wiring in Laravel apps: a scan command that finds AI provider keys leaked into tracked or client-reachable files, plus PHPStan rules that flag model output flowing into unsafe sinks and prompts built by concatenation. SARIF for CI.

Scan, redact, and optionally block outbound requests to AI providers (OpenAI, Anthropic, Gemini, and more) for leaked secrets and PII. Review in an inbox and fail CI before a prompt leaks. SDK-agnostic, at the HTTP layer.

Securely assume another user's identity in modern Laravel applications.