awesome-php-security

Security mondule for PHP7/8, the successsor to

Secure-Headers

Add security related headers to HTTP response

Enlightn is a static and dynamic analysis tool to improve the security of Laravel applications

Exakat

is a PHP static code analysis, with serious

phpcs-security-audit

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

progpilot

A static analyzer for security purposes

Parse

The scanner is a static scanning tool to review your PHP code for potential security-related issues

SonarPHP

from - A static code analyser for PHP language used as an extension for the SonarQube platform (200+ rules, Supports up to PHP 8, Import of unit test and coverage results, Support of custom rules)

PHP support (beta) and available in Snyk free tier

security-checker

PHP frontend for security.symfony.com

PHP security vulnerabilities monitoring

roave/security-advisories

Add this dependency to disallow known/vulnerable installation of packages directly through

Security Advisories

A database of PHP security advisories

php-malware-detector

PHP malware detector

Package manager scanner with a free tier

DVWA

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable

Insecure PHP Example

This is an example application built using Silex for routing to provide examples of SQL Injection, plain text passwords and XSS

A GitHub App that gives you instant security feedback in your Pull Requests

RIPS is the leading security analysis solution for PHP

A developer-first solution that automates finding & fixing vulnerabilities in your dependencies

Automated security for your web apps - real time application security protection

PHP Security and Cryptography consultants, open source library publishers