Meta-package for the padosoft/laravel-rebel-* enterprise authentication control plane: passwordless email-OTP, passkey-first, risk-based step-up with PSD2/SCA, channels, sessions, recovery, anomaly detection and a web admin panel — installs and ties the whole suite together.

Anomaly detection + AI security copilot for Laravel Rebel: deterministic rules detect anomaly cases; the optional AI only explains/suggests (sanitized prompts, no PII/OTP, human review). Part of padosoft/laravel-rebel-*.

High-assurance account recovery for Laravel Rebel: single-use HMAC-hashed recovery (backup) codes, generated once at enrolment, with anti-ATO checks. Part of padosoft/laravel-rebel-*.

Device/session registry for Laravel Rebel: session/device tracking, logout-everywhere, refresh-token rotation with reuse detection, and device trust. Part of padosoft/laravel-rebel-*.

Control-plane JSON API for Laravel Rebel: security metrics, audit-event explorer, OTP/step-up funnels, provider health, with permission-gated and tenant-scoped read models. Part of padosoft/laravel-rebel-*.

Channel/provider abstraction (SMS/WhatsApp/voice) for Laravel Rebel: verification routing with fallback, cooldown, multi-dimensional rate limiting, and anti toll-fraud/IRSF defences. Part of padosoft/laravel-rebel-*.

Web Admin Panel (Blade + AJAX + vanilla JS) for Laravel Rebel: a security operations dashboard over the Rebel Admin API. Part of padosoft/laravel-rebel-*.

Core primitives, value objects and contracts for Laravel Rebel: the enterprise authentication control plane (AAL/AMR assurance, security context, audit, Sanctum tokens, rate-limiting). The entry point of the padosoft/laravel-rebel-* ecosystem.

Auditor determinista para codebases Laravel: seguridad, performance, Eloquent y arquitectura.

Signed, timestamped, replay-protected and optionally AES-256-GCM-encrypted request/response bridge between a JavaScript front-end (SPA or Blade + AJAX) and a Laravel API. Framework-agnostic JS client. Works on Laravel 5.5 through 12 and PHP 7.1+.

Device-bound login sessions for Laravel: per-device remember-me tokens, a "where am I signed in" device list, and revoke/rename — privacy-respecting and Fortify-agnostic.

Filesystem intrusion evidence scanner for Laravel applications

Audit a Laravel project's Composer dependencies for upgrade safety, security, and Laravel compatibility.

Encrypt sensitive Laravel route parameters with Crypt and decrypt them before implicit binding.

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Sistema de detecção e bloqueio de bots, proxies e VPNs para Laravel

SOCWarden security observability SDK for Laravel — detect brute force, impossible travel, credential spray, and more from one API call.

Protected super admin account for Laravel. Zero-config authorization via Gate::before, defense-in-depth Eloquent observer, optional Filament v4 plugin, vendor-only CLI commands with friction controls. Designed for vendor-deployed applications where customer admins must not accidentally delete the vendor's support account.

Agentic Governance Layer for Laravel 13

A Laravel package for website health monitoring, IP threat detection, traffic analysis and auto-banning.

Kanbino Health endpoint for Laravel — emits stack profile + extensible probes for uptime + security advisory matching

Laravel wrapper for voku/anti-xss — Facade, service, validation rule, middleware and Blade directive to sanitize XSS in strings.

Build Laravel Vite assets inside a hardened Apple Container.

Modern security headers for Laravel — turn-key. Strict CSP with per-request nonces and 'strict-dynamic', Subresource Integrity with smart noise filtering, HSTS, Permissions-Policy. An interactive setup wizard asks which third parties you use (GTM, HubSpot, Stripe, reCAPTCHA, and a dozen more) and wires the right directives automatically. First-party violation reporting endpoints, Filament + Livewire + Vite friendly, Vapor-ready. Laravel 11, 12, 13 on PHP 8.2+.

A Laravel Health check for npm audit advisories.

A robust, security-hardened, and performance-optimized privilege/permission management system for Laravel applications with menu-based access control.

A Laravel package to monitor Composer dependencies for security vulnerabilities

Enterprise Runtime Security Platform for Laravel Applications

A Laravel package for file type detection using Google Magika AI.

A powerful security scanner for Laravel applications with CLI and web dashboard support to detect vulnerabilities like SQL Injection, XSS, secrets, and misconfigurations.

Lightweight Laravel bot protection middleware that detects and blocks automated attacks based on velocity, honeypots, header anomalies, and behavioral patterns.

Laravel Secure Baseline – Automated security checks for your Laravel app.

Laravel Session theft protection via client fingerprinting — auto-invalidates sessions used from unrecognized devices.

x-lock bot protection middleware for Laravel

Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.

Permissions-Policy (Feature-Policy) header builder and middleware for Laravel

Laravel package for hybrid encryption (RSA-OAEP + AES-256-GCM) for secure API request handling

Extensible Laravel authentication package providing actions for login, logout, sign-up, password reset, email verification and related security features.

A native, local-first security middleware for the Laravel AI SDK with bidirectional pseudonymization, prompt injection defense, and real-time Pulse telemetry.

Laravel package that adds an is_admin column to the users table and provides a middleware to protect admin-only routes.

Enterprise-grade Laravel security package providing WAF firewall protection, rate limiting, bot detection, honeypot traps, IP geo-blocking, CSRF/XSS/SQLi defence, API gateway security, real-time threat monitoring, malware scanning, and a built-in security dashboard — all configurable via a single config file.

A Laravel package to automatically capture and track IP addresses on Eloquent model actions such as signup, login, update, and deletion.

🔥 Advanced Security Package for Laravel 12 - The most comprehensive security solution for Laravel applications

Protect your Laravel app from AI scrapers, LLM crawlers, and prompt injection attacks

Reversible identifier obfuscation for Laravel projects (obfuscate locally, deobfuscate on trusted server with same key).

Static analysis CLI and MCP server for Laravel projects — zero dependencies, pure PHP 8.2+

AI-powered security auditor & CTF generator for Laravel. Watch AI hack your app in 15 seconds.

Real-time threat detection and security logging for Laravel applications. Detects SQL injection, XSS, DDoS, scanner bots, and more.

Laravel middleware for comprehensive security headers including CSP with nonce support, HSTS, and Permissions-Policy

Tamper-evident audit ledger for Laravel applications.