Libraries tagged by php security

API implementing common web security patterns (eg: authentication, authorization) for PHP applications based on OWASP guidelines

Go to Download

A framework-agnostic authorization Core for PHP. Roles and permissions with deny-overrides-grant precedence built in.

Go to Download

Staatic API client library for PHP. Staatic lets you create and deploy a streamlined static version of your WordPress site, enhancing performance, SEO, and security simultaneously.

Go to Download

Security Validation Constraints

Go to Download

Symfony Facebook Security Voter Bundle

Go to Download

Threema PHP-SDK to integrate Threema Gateway in your environment. This SDK allows you to send end-to-end-encrypted messages to Threema users using the Threema Gateway.

Go to Download

Static analysis for PHP regular expressions: parse, validate, explain, prove ReDoS safety, lint, optimize and compare patterns, with PHPStan, Psalm, Rector, Symfony and Laravel integrations.

Go to Download

Composable PHP authorization toolkit — Casbin RBAC enforcer, JWT/OIDC verification (JWKS), fine-grained capabilities, validation rules and ready-to-use HTTP middlewares for API protection.

Go to Download

O2System Security

Go to Download

Netresearch AI skill for security audits (OWASP, CWE, CVSS). Universal patterns + deep PHP/TYPO3 scanning with 80+ checkpoints.

Go to Download

A set of PHP class to manage log-in and log-out of web applications and that integrates with Mouf.

Go to Download

This package contains an implementation of a UserDao, that stores the application users in a simple PHP file. It can be used together with the MoufUserService to provide easy access management to an application. Since the users are stored in a PHP file, this very special DAO does not require a database!

Go to Download

Standalone, RFC 7519 / 7797 / 8725-compliant JWT library for PHP 8.3 and 8.4. Framework-agnostic.

Go to Download

Modern security headers for Laravel — turn-key. Strict CSP with per-request nonces and 'strict-dynamic', Subresource Integrity with smart noise filtering, HSTS, Permissions-Policy. An interactive setup wizard asks which third parties you use (GTM, HubSpot, Stripe, reCAPTCHA, and a dozen more) and wires the right directives automatically. First-party violation reporting endpoints, Filament + Livewire + Vite friendly, Vapor-ready. Laravel 11, 12, 13 on PHP 8.2+.

Go to Download

Système de cache moderne et sécurisé pour PHP 8+ avec support de multiples drivers (File, Redis, Memcached, Array), tags, TTL et invalidation

Go to Download