PHP download

Download the PHP package theprimestudio/laravel-sentinel without Composer

On this page you can find all versions of the php package theprimestudio/laravel-sentinel. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

Table of contents
Download theprimestudio/laravel-sentinel
More information about theprimestudio/laravel-sentinel
Files in theprimestudio/laravel-sentinel

Vendor theprimestudio
Package laravel-sentinel
Short Description Enterprise security, antivirus, webshell detection, WAF, file integrity, and quarantine suite for Laravel
License MIT
Homepage https://theprimestudio.com

Keywords security laravel integrity clamav webshell waf antivirus quarantine security-txt malware-scanner

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:

If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.

Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
To use Composer is sometimes complicated. Especially for beginners.
Composer needs much resources. Sometimes they are not available on a simple webspace.
If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.

Please rate this library. Is it a good library?

Example code of theprimestudio/laravel-sentinel

Informations about the package laravel-sentinel

Laravel Sentinel

Enterprise-grade security, antivirus, webshell detection, Web Application Firewall (WAF), file integrity monitoring, forensic quarantine, and tamper-evident telemetry for Laravel 10, 11, and 12.

Key Features

Deterministic File Integrity & Antivirus Scanner
- Static Heuristic Code Analyzer: Pure static analysis identifying web shells, disguised PHP polyglots in image files, SSI directives, server configuration overrides (.htaccess / .user.ini), dynamic evaluations (eval/assert), system command executions, and multi-layer decoder chains without executing target files.
- ClamAV Integration: Automatic detection and integration with local clamdscan daemons (utilizing --fdpass for zero-overhead permissions) and fallback to standalone clamscan.
- Baseline Inventory: SHA-256 state tracking differentiating authorized deployments (--accept-baseline) from hostile file tampering.
- Atomic Scanning Engine: Checkpointing, memory-bounded file traversal, time budgeting, and crash-resilient resume functionality.
Forensic Quarantine
- Moves detected threats out of public web root into dated quarantine directories.
- Enforces restrictive 0400 permissions with Apache/nginx execution denial.
- Retains comprehensive metadata (SHA-256, owner UID, group GID, inode, timestamps, host) with authorized, auditable restoration.
Database Content Security Review
- Scans database tables for stored-XSS and injected markup.
- HTMLPurifier-backed sanitizer with rich, basic, and plain profiles.
- Multi-pass URL and entity decode attack detection.
- Reversible backups (security_content_backups) before applying sanitization, allowing CLI or UI rollback.
Web Application Firewall (WAF) & Request Defense
- Inspects URL paths, query parameters, and non-GET request bodies for Path Traversal, PHP stream wrappers, null bytes, SQL Injection, Command Injection, XSS, and Template Injection.
- Automated bot mitigation filtering automated attack tools while safeguarding legitimate search engines.
- HTTP Security Headers: Content Security Policy (CSP), HSTS, X-Frame-Options (DENY), X-Content-Type-Options (nosniff), Referrer-Policy, and X-Powered-By suppression.
Tamper-Evident Incident Management & Telemetry
- Cryptographic SHA-256 hash chaining (hash = sha256(prev_hash + canonical_event)) ensuring stored audit logs cannot be edited or deleted without detection.
- Automated incident clustering with rate-limited flood suppression.
- Authentication anomaly detection: Brute-force and credential-stuffing monitoring with identifier masking.
- Throttled queued email notifications for critical incidents.
RFC 9116 security.txt
- Standards-compliant security disclosure policy at /.well-known/security.txt.
- Administrative GUI editor with URI validation and expiry constraints.
Full Administration UI
- Complete Blade administration panel for Vulnerabilities, File Findings, Quarantine Review, Incident Feed with real-time polling, CSV Export, and Security Audits.

Installation

You can install the package via Composer:

Publish configuration, migrations, and views:

Or publish individual assets via tags:

Run the database migrations:

Configuration

Edit config/security.php to customize your security policies:

enabled: Master toggle for all security features.
auth.user_model: Host application user model (defaults to App\Models\User).
admin: Configure route prefix (admin), route name prefix (admin.), middleware (['web', 'auth']), and permission integration.
csp: Content Security Policy directives.
scanner: Roots to scan, excluded paths, quarantine path, and ClamAV settings.
exploit_protection: WAF query and body inspection modes (block vs. log).

Console Commands

Scheduling & Daemon Setup

In Laravel 11 & 12, register scheduled tasks in routes/console.php:

Credits

Laravel Sentinel is proudly built and maintained by The Prime Studio.

License

The MIT License (MIT). Please see License File for more information.

All versions of laravel-sentinel with dependencies

PHP Build Version

Package Version

Version v1.0.0 Release 15. Oct 2026
create-project require 0 people chose require and
0 people chose create-project.

Download

Download latest version of laravel-sentinel from vendor theprimestudio

Requires php Version ^8.2
illuminate/contracts Version ^10.0 || ^11.0 || ^12.0
illuminate/support Version ^10.0 || ^11.0 || ^12.0
illuminate/database Version ^10.0 || ^11.0 || ^12.0
illuminate/console Version ^10.0 || ^11.0 || ^12.0
illuminate/http Version ^10.0 || ^11.0 || ^12.0
illuminate/routing Version ^10.0 || ^11.0 || ^12.0
illuminate/view Version ^10.0 || ^11.0 || ^12.0
illuminate/notifications Version ^10.0 || ^11.0 || ^12.0
symfony/process Version ^6.0 || ^7.0
ezyang/htmlpurifier Version ^4.17 || ^4.18

Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package theprimestudio/laravel-sentinel contains the following files

Loading the files please wait ...