Libraries tagged by Security Core

CCDN User Security Bundle

Go to Download

A PSR-7 middleware layer for providing CORS (Cross Origin Request Security) headers and security provisions. Instead of just allowing invalid CORs requests to come through, this middleware actively blocks them after validating.

Go to Download

The Push API allows you to *push* items and security identities, as opposed to letting standard Coveo Cloud V2 crawlers *pull* this data from a content repository. This is especially useful when you need to index content from a cloud or on-premises system for which no dedicated source type exists in the Coveo Cloud V2 platform.

Go to Download

The security checks of a CakePHP 2 application in one command: the Composer packages (SCA), the code (SAST) and the running application (DAST), each as a PDF report

Go to Download

laravel-mitnick helps you secure your Laravel apps by setting various HTTP headers. it can help!

Go to Download

Symfony bundle for public HTTP hardening: security headers (nosniff, HSTS, Permissions-Policy, CORP), nonce-based Content-Security-Policy, public Cache-Control, www-to-apex redirect, safe internal redirects and optional anonymous session-cookie strip for CDN-friendly public GET pages.

Go to Download

PHP library to mask (redact) credit card numbers, emails and more.

Go to Download

A lightweight and high-performance PHP validation library designed for enterprise-grade applications. It features zero dependencies, comprehensive test coverage, and a developer-friendly API—enabling teams to build scalable and secure systems with confidence.

Go to Download

The only Laravel audit package that ships a complete admin UI — Livewire table, Vue/Inertia table, and per-model timeline — with zero configuration. A simple, robust audit logging package for Laravel applications. Drop one trait onto a model and every create, update, delete, and many-to-many relationship change is automatically recorded.

Go to Download

Security scanner for Laravel 12 & 13, and standalone for Symfony, Yii2 and plain PHP: AST taint analysis of your code, React/Vue/Angular frontend, Docker, CI and shell script checks, checks of the booted app's config and routes, OSV dependency advisories, baselines and SARIF output.

Go to Download

A4 PDF reports printed by the Chrome command line: a cover with the result, a list and a page for each item

Go to Download

Coverage reporting for your .env: static analysis for env() call isolation, .env.example drift, and secret heuristics.

Go to Download

Authorisation coverage reporting for Laravel applications. Statically scans routes, controllers, Form Requests, and Policies to report what is and is not protected.

Go to Download

Passkey / WebAuthn adapter for the Milpa PHP framework: the lbuchs/webauthn implementation of milpa/auth's WebAuthnVerifier, plus in-memory challenge and credential stores. Ceremony types and contracts live in milpa/auth. A verified assertion mints a session — it is never a per-request transport. Zero framework, zero ORM.

Go to Download

Taint is a PHP extension for detecting XSS codes (tainted strings).

Go to Download