Libraries tagged by file security

Cleans files by removing any metadata with the help of mat2, exiftool and qpdf according to BSI guidelines.

Go to Download

A PHP library that scans your files for viruses using the adapter of your choice

Go to Download

Sets a Content-Security-Policy-Report-Only header, creates an action to receive CSP violation reports, and logs them to a file.

Go to Download

Set some basic variables using a yml file and this module will spit out a nicely formatted .env file

Go to Download

phpAudit is a simple shell script that scans PHP files for possible security risks.

Go to Download

A comprehensive WordPress logging service with Wonolog integration, secure file logging, multi-server protection, and environment-based configuration

Go to Download

A lightweight, file-based PHP firewall library for protecting web applications from bots, scanners, and common attacks.

Go to Download

A zero-trust Content Disarm and Reconstruction (CDR) engine for multi-format file sanitisation.

Go to Download

displays failed login attempts in your syslog or userlogins log file

Go to Download

Enterprise-grade Laravel security package providing WAF firewall protection, rate limiting, bot detection, honeypot traps, IP geo-blocking, CSRF/XSS/SQLi defence, API gateway security, real-time threat monitoring, malware scanning, and a built-in security dashboard — all configurable via a single config file.

Go to Download

Zero-dependency PHP Web Application Firewall — drop-in auto_prepend_file middleware

Go to Download

A Laravel package for file type detection using Google Magika AI.

Go to Download

Active malware prevention + on-disk scanner for Magento 2. Three real-time guards (REST API, universal upload, custom-options) block PolyShell webshells, polyglot files and PHP-object-injection payloads BEFORE they touch disk. A nightly recursive scanner finds anything that slipped through, auto-quarantines critical findings inside writable upload zones, and ships with a built-in vendor allowlist that prevents false positives on legitimate composer dependencies. Includes admin grid, in-admin documentation, signature catalog and email notifications.

Go to Download

Log failed MediaWiki login attempts to a file consumable by Fail2Ban

Go to Download

Static analysis for insecure AI wiring in Laravel apps: a scan command that finds AI provider keys leaked into tracked or client-reachable files, plus PHPStan rules that flag model output flowing into unsafe sinks and prompts built by concatenation. SARIF for CI.

Go to Download