Snuffleupagus
Security mondule for PHP7/8, the successsor to suhosin.
Security mondule for PHP7/8, the successsor to suhosin.
Contents
Awesome PHP Security Resources πΆππ
This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.
Web Framework Hardening
Secure-Headers
Add security related headers to HTTP response.
In 2 lists
Static Code Analysis
Enlightn
Enlightn is a static and dynamic analysis tool to improve the security of Laravel applications.
Exakat
Exakat is a PHP static code analysis, with serious Security reviews.
phpcs-security-audit
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code.; docker pull guardrails/phpcs-security-audit
In 2 lists
progpilot
A static analyzer for security purposes.
In 3 lists
Parse
The Parse scanner is a static scanning tool to review your PHP code for potential security-related issues.
SonarPHP
from SonarQube - A static code analyser for PHP language used as an extension for the SonarQube platform (200+ rules, Supports up to PHP 8, Import of unit test and coverage results, Support of custom rules)
Snyk Code
PHP support (beta) and available in Snyk free tier
Vulnerabilities and Security Advisories
security-checker
PHP frontend for security.symfony.com.; docker pull guardrails/security-checker
Symfony Security Monitoring
PHP security vulnerabilities monitoring.
roave/security-advisories
Add this dependency to disallow known/vulnerable installation of packages directly through composer update
Security Advisories
A database of PHP security advisories.
php-malware-detector
PHP malware detector
Snyk Open Source
Package manager scanner with a free tier
In 2 lists
Hacking Playground
DVWA
Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable.
In 3 lists
Insecure PHP Example
This is an example application built using Silex for routing to provide examples of SQL Injection, plain text passwords and XSS.
Guides
Awesome-AppSec: PHP-Section
Incredibly extensive, but you'll find something to fit the bill.
In 5 listsDetails
Companies
GuardRails
A GitHub App that gives you instant security feedback in your Pull Requests.
In 3 lists
RIPS
RIPS is the leading security analysis solution for PHP
In 3 lists
Snyk
A developer-first solution that automates finding & fixing vulnerabilities in your dependencies.
In 14 listsDetails
Sqreen
Automated security for your web apps - real time application security protection.
In 2 lists
Paragon Initiative Enterprises
PHP Security and Cryptography consultants, open source library publishers.
Related lists in Programming Languages
See category94
Awesome Rust
rust-unofficial/awesome-rust
A curated list of Rust code and resources.
94
Awesome Mac
jaywcjlove/awesome-mac
ο£Ώ This project is dedicated to collecting high-quality macOS software and organizing them systematically by different categories for easy search and use.
94
Awesome Python
vinta/awesome-python
Curated Python frameworks, libraries and resources.
94
Awesome C++
fffaraz/awesome-cpp
A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. Inspired by awesome-... stuff.
94
Awesome Go
avelino/awesome-go
Curated Go frameworks and libraries.
94
Awesome PHP
ziadoz/awesome-php
A curated list of amazingly awesome PHP libraries, resources and shiny things.