Laravel Secure by Default

Several tools, library, middleware, or others that to build a Secure by Default / Secure by Design a Laravel application

belajar-laravel-security

Belajar Laravel Security: https://docs.google.com/presentation/d/11x75m7p4t0JrKqBYYJz-wJ4JoulOPZShdvOeXyaGpu8/edit#slide=id.g2a1e0e57a94_0_317 https://www.youtube.com/watch?v=HwCTYwkz4fw

laravel-security

This package can be used to enhance the user security of Laravel projects.

laravel-mfa

This package provides a Middleware to protect pages with MFA in your Laravel projects.

laravel-mitnick

helps you secure your Laravel apps by setting various HTTP headers.

Article: Securing your Laravel application: A comprehensive Guide

real-world examples of how to implement these security measures in your own Laravel applications. By the end of this article, you'll have a solid understanding of how to build secure, robust, and scalable Laravel applications that can withstand even the most determined attackers.

security-headers

A collection of HTTP middleware classes to improve the security headers in your Laravel application

laravel-security-checker

Scan your Laravel app dependencies for known security vulnerabilities.

enlightn

The Enlightn OSS (open source software) version has 66 automated checks that scan your application code, web server configurations and routes to identify performance bottlenecks, possible security vulnerabilities and code reliability issues.

nova-security

This is a collection of different techniques and measures to make your laravel app more secure (bruteforce protection & 2FA).

Laravel Security Practices & Concerns

By implementing these measures, you can significantly enhance the security of your Laravel project and minimize the risk of exposing sensitive information. Remember that security is an ongoing process, so it's important to regularly review and update your security measures as new threats emerge.

laravel-env-secure

Simple Laravel package with zero dependencies for securing your env values, such as database passwords or API keys, to prevent exposure($_ENV or $_SERVER) due to mistakes

security-headers

Package provides a minimal and simple integration to attach OWASP security headers for building a secure Laravel application.

laravel-best-practices

Laravel best practices

Damn Vulnerable Laravel Application (DVLA):

https://github.com/InsiderPhD/Generic-University https://github.com/appelsiini/vulnerable-laravel-app