Libraries tagged by owasp

PHP-RBAC is the de-facto authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest implementation yet.

Go to Download

CSRF protector php, a standalone php library for csrf mitigation in web applications. Easy to integrate in any php web app.

Go to Download

Work with CycloneDX documents.

Go to Download

AI-powered multi-agent security auditor for Symfony applications — provider-agnostic via symfony/ai

Go to Download

PHP client API for OWASP ZAP

Go to Download

A Laravel package to help developers implement OWASP Top 10 security guidelines

Go to Download

Symfony authentication audit log with geolocation, device detection and security notifications

Go to Download

Symfony PhpRabcBundle allow to use RBAC control access for symfony project

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.

Go to Download

A security-focused static analysis package for Laravel applications

Go to Download

Standalone PHP engine that parses the OWASP Core Rule Set (CRS) and evaluates HTTP requests against it.

Go to Download

OWASP Core Rule Set (CRS) for the Phirewall PHP firewall - the SecRule engine plus blocklist and fail2ban presets per paranoia level

Go to Download

A PHP tool to lint PHP files for security issues based on CIS and OWASP best practices.

Go to Download

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download