PHPackages                             ados-labs/enterprise-security-shield - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Admin Panels](/categories/admin)
4. /
5. ados-labs/enterprise-security-shield

ActiveLibrary[Admin Panels](/categories/admin)

ados-labs/enterprise-security-shield
====================================

Enterprise Security Shield - WAF, Honeypot, Scanner Detection, Rate Limiting, Resilience Patterns with Admin Panel Integration

v1.0.0(3mo ago)021MITPHPPHP ^8.1CI passing

Since Feb 1Pushed 3mo agoCompare

[ Source](https://github.com/adoslabsproject-gif/enterprise-security-shield)[ Packagist](https://packagist.org/packages/ados-labs/enterprise-security-shield)[ RSS](/packages/ados-labs-enterprise-security-shield/feed)WikiDiscussions main Synced 1mo ago

READMEChangelogDependencies (5)Versions (2)Used By (1)

Enterprise Security Shield
==========================

[](#enterprise-security-shield)

[![PHP Version](https://camo.githubusercontent.com/d6aac44f81cb2e6f4e71f098a1cb4a71992f24f7bfb424f6670db8313c9a855c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d253545382e312d626c7565)](https://www.php.net/)[![PHPStan Level](https://camo.githubusercontent.com/a0aa75ca2d85af0fc31a80326946fec7c297c53b7395bce383b3416558b104c7/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048505374616e2d4c6576656c253230382d627269676874677265656e)](https://phpstan.org/)[![License](https://camo.githubusercontent.com/784362b26e4b3546254f1893e778ba64616e362bd6ac791991d2c9e880a3a64e/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d4d49542d677265656e2e737667)](LICENSE)

**Enterprise-Grade Web Application Firewall (WAF) for PHP 8.1+**

A complete security solution with ML-based threat detection, bot verification, anomaly detection, and resilience patterns trained on real attack data.

---

Features
--------

[](#features)

### Core Security

[](#core-security)

FeatureDescription**Online Learning ML**TRUE Machine Learning that learns continuously from security events**ML Threat Classifier**Naive Bayes classifier pre-trained on 662 real security events**XSS Detection**Multi-layer detection with HTML entity decode loop**SQL Injection Detection**Pattern + behavioral analysis**Anomaly Detection**Z-Score + IQR statistical analysis**Bot Verification**DNS + IP range verification for 30+ bots**Honeypot System**69 trap endpoints to catch scanners**GeoIP Blocking**Country-level restrictions via MaxMind**Rate Limiting**4 algorithms: sliding window, token bucket, leaky bucket, fixed### Enterprise Security (NEW)

[](#enterprise-security-new)

FeatureDescription**Request Smuggling Detection**CL.TE, TE.CL, TE.TE attack detection**WebSocket Protection**CSWSH detection, origin validation, connection limits**JWT Security Validation**alg:none attacks, algorithm confusion, header injection**GraphQL Protection**Query depth/complexity limits, batching abuse, introspection control**DDoS Layer 7**Slowloris, RUDY, HTTP flood detection**HTTP/2 Protection**CONTINUATION flood, Rapid Reset (CVE-2023-44487)**API Rate Limiting**Per-endpoint, per-API-key, tier-based limits**Threat Intelligence**Auto-updating feeds (FireHOL, Emerging Threats, Abuse.ch)### Resilience Patterns

[](#resilience-patterns)

PatternDescription**Circuit Breaker**Fail fast when dependency is down**Retry Policy**Exponential backoff with jitter**Fallback Chain**Try providers in order until success**Bulkhead**Limit concurrent executions### Observability

[](#observability)

ComponentFormat**Tracing**OpenTelemetry-compatible, W3C traceparent**Metrics**Prometheus text format**Health Checks**JSON + HTTP status for Kubernetes---

Installation
------------

[](#installation)

```
composer require ados-labs/enterprise-security-shield
```

### Requirements

[](#requirements)

- PHP 8.1+ (uses enums, readonly properties, named arguments)
- ext-json (required)

### Optional Extensions

[](#optional-extensions)

ExtensionRequired Forext-redisRedisStorage (recommended for production)ext-pdoDatabaseStorageext-curlNotifications, GeoIP### Optional Dependencies

[](#optional-dependencies)

PackageRequired Forgeoip2/geoip2GeoIP blocking (MaxMind)---

Quick Start
-----------

[](#quick-start)

### Minimal Setup (No Redis Required)

[](#minimal-setup-no-redis-required)

```