PHPackages                             cybear-care/laravel-security - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. cybear-care/laravel-security

ActiveLibrary[Security](/categories/security)

cybear-care/laravel-security
============================

Enterprise-grade web application security for Laravel applications with centralized management dashboard integration

01PHPCI failing

Since Sep 21Pushed 2w agoCompare

[ Source](https://github.com/CyBearCare/laravel-security)[ Packagist](https://packagist.org/packages/cybear-care/laravel-security)[ RSS](/packages/cybear-care-laravel-security/feed)WikiDiscussions main Synced 2w ago

READMEChangelogDependenciesVersions (1)Used By (0)

Cybear Laravel Security
=======================

[](#cybear-laravel-security)

Laravel-native security posture, runtime telemetry, WAF monitoring, and DAST context for Laravel 12 and 13.

The package is standalone. It uses Laravel's own routing, middleware, events, cache, HTTP client, encryption, scheduler, and Eloquent integration.

> This package is under active development.

What it provides
----------------

[](#what-it-provides)

- `cybear:scan` with 37 explainable, capability-aware Laravel posture checks
- table output for developers and versioned JSON for CI
- stable occurrence fingerprints, source locations, severity, confidence, evidence, and remediation
- CI baselines and expiring, reasoned suppressions that preserve new-finding detection
- optional APP\_KEY-encrypted outbox delivery to Cybear
- monitor-first, route-aware WAF evaluation
- exact rule scoping, expiry, versioning, and deterministic staged rollout
- deployment-bound, replay-resistant DAST correlation
- authentication and security-event auditing
- package, route, middleware, environment, and deployment inventory
- safe API behavior without assuming browser sessions
- privacy-safe defaults with no request-body or query-value capture

Requirements
------------

[](#requirements)

- PHP 8.2+
- Laravel 12 or 13
- a Laravel-supported database for telemetry and SaaS delivery

Start with a local posture scan
-------------------------------

[](#start-with-a-local-posture-scan)

```
composer require cybear-care/laravel-security
php artisan cybear:scan
```

The local scan works with `CYBEAR_ENABLED=false` and without an API key. It is read-only unless `--output` or `--send` is supplied.

Four checks perform bounded, local-only inspection of application controller and FormRequest methods for Laravel authorization, mass-assignment, upload-validation, and signed-link signals. Target methods are never invoked, vendor code is excluded, and source text is never placed in a report or sent to Cybear.

```
php artisan cybear:scan --format=json --fail-on=high
php artisan cybear:scan --output=storage/app/cybear-posture.json
php artisan cybear:scan --baseline=cybear-baseline.json --ci
```

Enable runtime integration
--------------------------

[](#enable-runtime-integration)

```
php artisan cybear:setup
```

Setup publishes configuration, runs migrations, verifies the application, and synchronizes rules before enabling the package. WAF protection begins in `monitor` mode.

Use `php artisan cybear:status` to review the active configuration, connection state, collection health, and WAF state. Run `php artisan cybear:sync` after changing remote protection rules.

###  Health Score

21

—

LowBetter than 17% of packages

Maintenance63

Regular maintenance activity

Popularity1

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity14

Early-stage or recently created project

 Bus Factor1

Top contributor holds 50% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/6ffae405419e180debafa7f4dbc01b62bf38d73f272769548e16d6d9b76e49d5?d=identicon)[cybear-care](/maintainers/cybear-care)

---

Top Contributors

[![arnoldasr](https://avatars.githubusercontent.com/u/87844946?v=4)](https://github.com/arnoldasr "arnoldasr (1 commits)")[![kibernautas](https://avatars.githubusercontent.com/u/49907666?v=4)](https://github.com/kibernautas "kibernautas (1 commits)")

### Embed Badge

![Health badge](/badges/cybear-care-laravel-security/health.svg)

```
[![Health](https://phpackages.com/badges/cybear-care-laravel-security/health.svg)](https://phpackages.com/packages/cybear-care-laravel-security)
```

###  Alternatives

[phpids/phpids

PHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art security layer for your PHP based web application

791150.0k2](/packages/phpids-phpids)[paragonie/ecc

PHP Elliptic Curve Cryptography library

25866.3k44](/packages/paragonie-ecc)[sansec/magento2-module-shield

15218.6k](/packages/sansec-magento2-module-shield)[nicobleiler/php-passphrase

Passphrase generator with Laravel integration, inspired by Bitwarden. Uses the EFF long word list by default with support for custom wordlists.

4912.6k](/packages/nicobleiler-php-passphrase)[dwgebler/encryption

Encryption wrapper for PHP using libsodium — simple API for symmetric and asymmetric encryption, password hashing, digital signing, and message authentication.

317.5k](/packages/dwgebler-encryption)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)