Libraries tagged by php security

A lightweight, file-based PHP firewall library for protecting web applications from bots, scanners, and common attacks.

Go to Download

Signed and encrypted XML tokens (XML Digital Signature, XML Encryption) for PHP

Go to Download

PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.

Go to Download

TWS Laravel Starter Kit — starter React: aplicativo Laravel 13 com painel do usuário em React 19 + Inertia 3 + TypeScript + Tailwind 4 + shadcn/ui (a partir do kit oficial do Laravel), com a autenticação, a segurança e a auditoria dos pacotes twstec/kit-*. Contas e API, uploads, o painel /admin e os webhooks são opcionais: escolha com `php artisan tws:install`.

Go to Download

TWS Laravel Starter Kit — starter Livewire: aplicativo Laravel 13 completo (painel do usuário em Livewire 4, autenticação com verificação em duas etapas, segurança e auditoria ligadas pelos pacotes) sobre os pacotes twstec/kit-*. Contas e API, uploads, o painel /admin e os webhooks são opcionais: escolha com `php artisan tws:install`.

Go to Download

Portable PHP password hashing framework based on http://openwall.com/phpass/

Go to Download

A PHP library for cryptographic operations with KMS integration, Caching(local,redis) and Secret manager.

Go to Download

A set of simple tools to help manage staging websites

Go to Download

Framework-agnostic intrusion detection and prevention layer for PHP web apps.

Go to Download

Installs chrome-headless-shell and the chromedriver of the same version from Chrome for Testing, pinned and SHA-256-checked, as a Composer dev dependency for Laravel Dusk, Symfony Panther, php-webdriver and chrome-php, without Node.

Go to Download

Symfony JWT Authenticator Bundle

Go to Download

Symfony Google Authenticator Bundle

Go to Download

PHP-level Web Application Firewall for Silverstripe - blocks vulnerability scanners, bad bots, and malicious IPs

Go to Download

PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.

Go to Download

Bearer/JWT resource-server authentication (JWS verification, JWKS, RFC 9068 client-type resolution) for Quiote, built on firebase/php-jwt.

Go to Download