make-dev/laravel-security
Drop-in security headers for Laravel 11–13: HSTS, CSP with per-request nonces and strict-dynamic, X-Content-Type-Options, Permissions-Policy, and Subresource Integrity. Includes CSP/SRI violation report endpoints, logging/db storage, and Vapor-friendly SRI manifests.
|
Package
|
Score
|
Description
|
Stars
|
Likes
|
Forks
|
Downloads
|
Issues
|
Score
|
Opportunity
|
License
|
Last Release
|
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bepsvpt/secure-headers | 0.84 | — | 550 | 552 | 48 | 157K | 2 | 4.6 | 33.8 | MIT | — | |
| duc01nguyen/security-headers-bundle-symfony | 0.84 | — | 0 | 0 | 0 | 0 | 0 | 0.0 | — | — | — | |
| 14four/laravel-force-https | 0.83 | Laravel middleware package to force HTTPS across your app. Automatically redirects HTTP requests to HTTPS, with options to exclude paths or environments so you can keep local/testing flexible while enforcing secure connections in production. | 0 | 0 | — | 0 | — | 0.0 | — | — | — | |
| paragonie/csp-builder | 0.83 | Build and send Content-Security-Policy headers in PHP from JSON files, JSON strings, or arrays. CSP Builder makes it easy to define directives programmatically and integrate CSP into web apps to improve security. | 541 | 546 | 39 | 79K | 7 | 13.8 | 32.3 | MIT | 1 year ago | |
| becklyn/security-bundle | 0.82 | — | 3 | 3 | 0 | 178 | 0 | 1.5 | 22.9 | — | 3 years ago | |
| 14four/laravel-force-host | 0.82 | Middleware for Laravel that forces a single canonical host for all requests. Automatically redirects to your configured domain (and optionally scheme), preventing duplicate URLs across www/non-www and improving SEO, cache consistency, and security. | 0 | 0 | — | 0 | — | 0.0 | — | — | — | |
| spatie/laravel-csp | 0.81 | Set Content Security Policy (CSP) headers in Laravel to control which scripts, styles, and resources can load and where they can send data. Helps prevent XSS and malicious third-party scripts. Includes report-only mode, nonces, and easy config. | 869 | 875 | 100 | 522K | 0 | 36.4 | 44.0 | MIT | 1 month ago | |
| jms/security-extra-bundle | 0.81 | — | 252 | 260 | 97 | 16K | 34 | 16.5 | 39.5 | — | 9 years ago | |
| nelmio/security-bundle | 0.81 | Symfony bundle adding practical security headers and protections: Content Security Policy, X-Frame-Options clickjacking defense, HSTS/HTTPS enforcement, signed cookies, external redirect detection, and content-type sniffing disablement. | 676 | 685 | 93 | 348K | 26 | 35.6 | 52.3 | MIT | 5 months ago | |
| artisanpack-ui/security | 0.81 | Core Laravel security toolkit for ArtisanPack UI: sanitization, escaping (Laminas Escaper), KSES filtering, validation rules, security/CSP middleware, CSP builder with nonce & reporting, rate limiting, audit/scan commands, and testing helpers. | 0 | 0 | 1 | 936 | 6 | 23.3 | 49.5 | MIT | 2 weeks ago | |
| adimeo-data-suite/security | 0.81 | Laravel security toolkit for Adimeo Data Suite apps, providing common security utilities and integrations such as authentication/authorization helpers, hardened defaults, and middleware-friendly protections to secure APIs and admin back offices. | 0 | 0 | 0 | 0 | 0 | 0.0 | — | — | — | |
| codeconsortium/ccdn-user-security-bundle | 0.81 | — | 58 | 59 | 49 | 0 | 14 | 5.9 | 4.9 | — | — | |
| spatie/security-advisories-health-check | 0.81 | Laravel Health check that queries Packagist security advisories for your installed PHP packages and reports known vulnerabilities. Supports retries, result caching via Laravel cache, and ignoring specific packages for cleaner health reports. | 52 | 52 | 6 | 127K | 0 | 6.9 | 48.1 | MIT | 9 months ago | |
| moox/security | 0.81 | — | 5 | 5 | 0 | 0 | 0 | 16.3 | — | MIT | 5 months ago | |
| adunblock/server-tag-symfony | 0.80 | Symfony bundle that fetches script URLs from a remote endpoint and renders them via a Twig server_tag() function. Uses Symfony HttpClient, optional caching with configurable TTL, safe HTML escaping, and graceful error handling. Compatible with Symfony 5–8. | 0 | 0 | 0 | 0 | 0 | 0.0 | — | — | — | |
| slevomat/coding-standard | 0.80 | — | 1,480 | 1,486 | 194 | 3M | 91 | 63.6 | 81.4 | MIT | 6 days ago | |
| aubes/csp-bundle | 0.80 | — | 2 | 2 | 0 | 4 | 0 | 16.2 | 5.8 | MIT | 3 months ago | |
| salehye/laravel-security | 0.80 | — | 0 | 0 | 0 | 0 | 0 | 0.0 | — | MIT | — | |
| m6web/php-cs-fixer-config | 0.80 | Reusable PHP CS Fixer configuration from M6Web/Bedrock Streaming. Install via Composer and use the provided BedrockStreaming config in .php-cs-fixer.dist.php, with options to extend/override rules for your project or CI. | 7 | 8 | 7 | 1K | 0 | 24.8 | 34.9 | MIT | 2 months ago | |
| draw/security | 0.79 | — | 0 | 0 | 0 | 526 | 0 | 0.0 | 37.6 | — | — |
How can I help you explore Laravel packages today?