Libraries tagged by security user

A security cryptography library for PHP. It can be used by different frameworks or pure PHP

Go to Download

Core ALGM plugin library that contains the policies and profiles we use to run our Drutiny audits

Go to Download

An implementation of PBKDF2 invented by RSA Laboratories. Useful for password strengthening.

Go to Download

Image upload & management class, created specially for performance and security - easy to use, chainable, supports JPEG & WebP file extensions

Go to Download

Login application that uses Webiny Framework Security component.

Go to Download

An easy to use firewall and security library for PHP and the Symfony HttpKernel.

Go to Download

SOOS ( https://soos.io ) is an independent software security company, located in Winooski, VT USA, building security software for your team. Used for testing purposes, this package is an example of a vulnerable package on a public registry.

Go to Download

A lightweight encryption library implementing techniques from the research paper 'A Hybrid Cryptographic Scheme of Modified Vigenère Cipher using Randomized Approach for Enhancing Data Security' by Sazzad Saju. This library aims to provide robust data security with an easy-to-use API. For more details, visit: https://bit.ly/cipher-bsk

Go to Download

Some classes allowing for Indieauth to be used alongside the Symfony Security component

Go to Download

ezsession is a versatile PHP session handler designed to provide seamless session management by combining the strengths of relational databases (MySQL), key-value stores (Redis), and JWT tokens. It offers developers flexible, secure, and scalable session storage, making it ideal for applications requiring high-performance, distributed, and stateless authentication systems. With ezsession, you can customize your session storage strategy to suit a variety of use cases while ensuring enhanced security and simplified management.

Go to Download

A level-head on the scope of data, integrity, security, and most of all, ease of use; on the ideology of hammering and spoofing

Go to Download

Transforms Laravel Passport's default incrementing integer client_id into an industry standard unique hashed string. Optionally, you can use encrypted client secrets for improved security. The package is non-intrusive. See the readme for details.

Go to Download

Transforms Laravel Passport's default incrementing integer client_id into an industry standard unique hashed string. Optionally, you can use encrypted client secrets for improved security. The package is non-intrusive. See the readme for details.

Go to Download

secrets is used to encrypt messages and share them as a one-time link. The extension is suitable for organizations that place particular emphasis on security and trustworthiness. Since all communication takes place via your own web server, no third-party tools from servers whose location is not known (DSGVO) are necessary. Your own domain name in the link is more trustworthy and makes a more professional impression.

Go to Download

The MessageMedia Signature Key API provides a number of endpoints for managing key used to sign each unique request to ensure security and the requests can't (easily) be spoofed. This is similar to using HMAC in your outbound messaging (rather than HTTP Basic).

Go to Download