Libraries tagged by php-security

Composer integration for local PHP security check

Go to Download

Lightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.

Go to Download

A PHP Security Scanner

Go to Download

A PHP security library

Go to Download

Framework-agnostic static security scanner for PHP. Detects SQLi, XSS, command injection, path traversal, insecure deserialization, weak crypto, hardcoded secrets, and more.

Go to Download

Laravel GuardDog — Scan your Laravel project for common security vulnerabilities and generate beautiful HTML reports.

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

A PHP security attack detection plugin with 31 stateless threat detectors and 4 cross-request identity checks (session hijack, unusual login, data tamper, brute-force lockout). Works with Laravel, Webman, ThinkPHP, and Hyperf, or with no framework at all via global functions.

Go to Download

A PHP tool to lint PHP files for security issues based on CIS and OWASP best practices.

Go to Download

Composer integration for local PHP security check

Go to Download

A PHP security linter to detect insecure functions like var_dump, print_r, and other dangerous functions in your codebase

Go to Download

Drutiny integration for local-php-security-checker

Go to Download

A security-first static analysis tool for PHP applications and frameworks. Identifies risky patterns and vulnerabilities based on CWE classifications.

Go to Download

Lightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.

Go to Download

Comprehensive PHP security library: CSP, Security Headers, CSRF, Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, and Audit Logging

Go to Download