Libraries tagged by app security

Web App Security Implementation

Go to Download

Security related helpers for symfony apps.

Go to Download

Automated In-App Penetration Testing and DAST Security Audit Suite for Laravel

Go to Download

Headless manager for the well-known files every modern web app owes bots AND agents — robots.txt, .well-known/security.txt, llms.txt, humans.txt, sitemap.xml, and an agents/AI manifest. Define them once in code/config and serve them consistently. Zero runtime deps; ships a default-open robots evaluator so scrapers can honor robots honestly, and makes it hard to leak a protected path. Framework-agnostic core + Laravel adapter.

Go to Download

Add CSP headers to the responses of a Laravel app (Fork)

Go to Download

Laravel 2FA package with TOTP, Email OTP, Passkeys & Recovery Codes.

Go to Download

AI-powered security auditor & CTF generator for Laravel. Watch AI hack your app in 15 seconds.

Go to Download

Complete & easy-to-implement MFA solution for use with Google Authenticator App.

Go to Download

Blocks spam bots and Livewire payload injection in Laravel apps, keeps the resulting Livewire exceptions out of Sentry, and audits Livewire components for unlocked public properties.

Go to Download

Two-factor authentication for Sylius administrators: passkeys, an authenticator app (TOTP) or a code sent by e-mail, with enforced setup and integration with calmfox/sylius-admin-invitation-plugin.

Go to Download

Admin-panel-agnostic core for forcing two-factor authentication in any Laravel app: a shared bypass registry (compose several "skip 2FA" reasons) that the nova-force-two-factor and filament-force-two-factor adapters enforce.

Go to Download

Stellar Security hardening guard for Laravel (blocks APP_DEBUG=true on production-like hosts).

Go to Download

Multi-channel application context management for Laravel with JWT and API Key authentication

Go to Download

"License/Serial for web apllication"

Go to Download

Instant account security with effortless, email-based two-factor authentication; optional mobile app for more security; no tokens

Go to Download