A PHP security attack detection plugin with 31 stateless threat detectors and 4 cross-request identity checks (session hijack, unusual login, data tamper, brute-force lockout). Works with Laravel, Webman, ThinkPHP, Hyperf, Yii2, and Yii3, or with no framework at all via global functions.

Go to Download

move-elevator/local-php-security-checker-installer

0 Favers
16254 Downloads

Composer integration for local PHP security check

Go to Download

laramint/php-security-scanner

3 Favers
4988 Downloads

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download

siberfx/laravel-risk-analyzer

2 Favers
288 Downloads

Security scanner for Laravel 12 & 13, and standalone for Symfony, Yii2 and plain PHP: AST taint analysis of your code, React/Vue/Angular frontend, Docker, CI and shell script checks, checks of the booted app's config and routes, OSV dependency advisories, baselines and SARIF output.

Go to Download

laramint/laravel-security-scanner

3 Favers
4935 Downloads

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download