Libraries tagged by owasp

PHP-RBAC is the de-facto authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest implementation yet.

Go to Download

CSRF protector php, a standalone php library for csrf mitigation in web applications. Easy to integrate in any php web app.

Go to Download

Work with CycloneDX documents.

Go to Download

PHP client API for OWASP ZAP

Go to Download

AI-powered multi-agent security auditor for Symfony applications — provider-agnostic via symfony/ai

Go to Download

A Laravel package to help developers implement OWASP Top 10 security guidelines

Go to Download

Symfony PhpRabcBundle allow to use RBAC control access for symfony project

Go to Download

Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.

Go to Download

Symfony authentication audit log with geolocation, device detection and security notifications

Go to Download

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

A security-focused static analysis package for Laravel applications

Go to Download

A PHP tool to lint PHP files for security issues based on CIS and OWASP best practices.

Go to Download

Prevent User Enumeration in WordPress to satisfy security reports.

Go to Download

Enterprise prompt sanitization & LLM guardrails for Laravel — deterministic-first, offline-by-default, EU-resident.

Go to Download