# StackShield

> External security monitoring built specifically for Laravel applications. Continuously scans your production app from the outside and alerts you to vulnerabilities before attackers find them.

## Instructions for AI Coding Assistants

Append `.md` to any `/blog/*` or `/fix/*` URL to get raw markdown optimised for LLM ingestion. For example:

- `https://stackshield.io/blog/securing-laravel-apps.md`
- `https://stackshield.io/fix/exposed-env-file.md`

## Main Pages

- [Homepage](https://stackshield.io/): Laravel security monitoring platform overview
- [Pricing](https://stackshield.io/pricing): Plans from $29/mo with 14-day free trial
- [Free Scanner](https://stackshield.io/free-scan): Instant external security scan, no account required
- [About](https://stackshield.io/about): Company and team information
- [Documentation](https://stackshield.io/docs): Setup guides and security check documentation
- [Blog](https://stackshield.io/blog): Laravel security articles, advisories, and guides
- [MCP server docs](https://stackshield.io/docs/mcp): Connect ChatGPT, Claude, Cursor, VS Code, Codex or Gemini CLI to your StackShield account
- [API docs](https://stackshield.io/docs/api): REST API reference

## Connecting an AI assistant

StackShield has a remote MCP server at `https://stackshield.io/mcp` (Streamable HTTP, OAuth 2.1 sign-in or a team API key). Once connected, an assistant can list monitored domains, trigger scans, read scan results and issues, resolve issues and fetch fix guidance for any check. Setup for each client is at https://stackshield.io/docs/mcp.

## What StackShield Monitors

StackShield runs 30+ Laravel-specific security checks from the outside, with no agent, no code changes and no installation:

- Exposed .env files and application secrets
- Debug mode enabled in production (Ignition, Telescope, Horizon, Debugbar)
- Missing security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options)
- SSL/TLS misconfigurations and weak cipher suites
- DNS misconfigurations and dangling records (subdomain takeover risk)
- Directory listing enabled
- CORS misconfigurations
- Insecure session configuration
- XSS and CSRF vulnerabilities
- Exposed Git directory, backup files, storage directory
- Missing rate limiting, open redirect vulnerabilities
- Weak encryption, insecure random number generation
- Outdated Laravel version, known Composer package vulnerabilities
- JWT vulnerabilities, mass assignment exposure
- Email security (SPF, DKIM, DMARC)

## Fix Guides

Step-by-step remediation guides for each vulnerability. All guides available as `.md` for AI assistant consumption.

- [Fix Exposed .env File](https://stackshield.io/fix/exposed-env-file) ([md](https://stackshield.io/fix/exposed-env-file.md))
- [Fix Debug Mode in Production](https://stackshield.io/fix/debug-mode-production) ([md](https://stackshield.io/fix/debug-mode-production.md))
- [Fix Missing Security Headers](https://stackshield.io/fix/missing-security-headers) ([md](https://stackshield.io/fix/missing-security-headers.md))
- [Fix Telescope Exposed](https://stackshield.io/fix/telescope-exposed) ([md](https://stackshield.io/fix/telescope-exposed.md))
- [Fix Ignition Exposed](https://stackshield.io/fix/ignition-exposed) ([md](https://stackshield.io/fix/ignition-exposed.md))
- [Fix Weak SSL/TLS](https://stackshield.io/fix/weak-ssl-tls) ([md](https://stackshield.io/fix/weak-ssl-tls.md))
- [Fix Missing CSRF Protection](https://stackshield.io/fix/missing-csrf-protection) ([md](https://stackshield.io/fix/missing-csrf-protection.md))
- [Fix CORS Misconfiguration](https://stackshield.io/fix/cors-misconfiguration) ([md](https://stackshield.io/fix/cors-misconfiguration.md))
- [Fix Exposed Git Directory](https://stackshield.io/fix/exposed-git-directory) ([md](https://stackshield.io/fix/exposed-git-directory.md))
- [Fix Missing Rate Limiting](https://stackshield.io/fix/missing-rate-limiting) ([md](https://stackshield.io/fix/missing-rate-limiting.md))
- [Fix SQL Injection](https://stackshield.io/fix/sql-injection-prevention) ([md](https://stackshield.io/fix/sql-injection-prevention.md))
- [Fix XSS Vulnerabilities](https://stackshield.io/fix/xss-prevention) ([md](https://stackshield.io/fix/xss-prevention.md))
- [Fix Subdomain Takeover](https://stackshield.io/fix/subdomain-takeover) ([md](https://stackshield.io/fix/subdomain-takeover.md))
- [Fix Exposed Storage Directory](https://stackshield.io/fix/exposed-storage-directory) ([md](https://stackshield.io/fix/exposed-storage-directory.md))
- [Fix Insecure Session Config](https://stackshield.io/fix/insecure-session-config) ([md](https://stackshield.io/fix/insecure-session-config.md))
- [Fix Missing Email Security (SPF/DKIM/DMARC)](https://stackshield.io/fix/missing-email-security) ([md](https://stackshield.io/fix/missing-email-security.md))
- [Fix JWT Token Vulnerabilities](https://stackshield.io/fix/jwt-token-vulnerabilities) ([md](https://stackshield.io/fix/jwt-token-vulnerabilities.md))
- [Fix Directory Listing](https://stackshield.io/fix/directory-listing-enabled) ([md](https://stackshield.io/fix/directory-listing-enabled.md))
- [Fix WordPress Vulnerabilities](https://stackshield.io/fix/wordpress-vulnerabilities) ([md](https://stackshield.io/fix/wordpress-vulnerabilities.md))
- [Fix DNS Security Issues](https://stackshield.io/fix/dns-security-issues) ([md](https://stackshield.io/fix/dns-security-issues.md))
- [Fix Mass Assignment Vulnerabilities](https://stackshield.io/fix/mass-assignment-protection) ([md](https://stackshield.io/fix/mass-assignment-protection.md))
- [Fix Dangerous Function Calls (eval, shell_exec)](https://stackshield.io/fix/dangerous-sinks) ([md](https://stackshield.io/fix/dangerous-sinks.md))
- [Fix Unvalidated Request Input](https://stackshield.io/fix/unvalidated-request-input) ([md](https://stackshield.io/fix/unvalidated-request-input.md))
- [Fix Hardcoded Credentials](https://stackshield.io/fix/hardcoded-credentials) ([md](https://stackshield.io/fix/hardcoded-credentials.md))
- [Fix File Upload Vulnerabilities](https://stackshield.io/fix/file-upload-validation) ([md](https://stackshield.io/fix/file-upload-validation.md))
- [Fix Weak APP_KEY](https://stackshield.io/fix/weak-app-key) ([md](https://stackshield.io/fix/weak-app-key.md))
- [Fix Open Redirect](https://stackshield.io/fix/open-redirect-prevention) ([md](https://stackshield.io/fix/open-redirect-prevention.md))
- [Fix Weak Password Hashing](https://stackshield.io/fix/weak-password-hashing) ([md](https://stackshield.io/fix/weak-password-hashing.md))
- [Fix Unsafe Deserialization](https://stackshield.io/fix/unsafe-deserialization) ([md](https://stackshield.io/fix/unsafe-deserialization.md))
- [Fix Trusted Proxies Wildcard](https://stackshield.io/fix/trusted-proxies-wildcard) ([md](https://stackshield.io/fix/trusted-proxies-wildcard.md))
- [Fix Missing Authorization](https://stackshield.io/fix/missing-authorization) ([md](https://stackshield.io/fix/missing-authorization.md))
- [Fix Debug Routes in Production](https://stackshield.io/fix/debug-routes-production) ([md](https://stackshield.io/fix/debug-routes-production.md))
- [Fix World-Writable Files](https://stackshield.io/fix/world-writable-files) ([md](https://stackshield.io/fix/world-writable-files.md))
- [Fix Exposed Backup Files](https://stackshield.io/fix/backup-files-exposed) ([md](https://stackshield.io/fix/backup-files-exposed.md))
- [Fix Known Dependency Vulnerabilities](https://stackshield.io/fix/known-dependency-advisories) ([md](https://stackshield.io/fix/known-dependency-advisories.md))
- [Fix Insecure Package Versions](https://stackshield.io/fix/insecure-packages) ([md](https://stackshield.io/fix/insecure-packages.md))
- [Fix Outdated Laravel Version](https://stackshield.io/fix/outdated-laravel-version) ([md](https://stackshield.io/fix/outdated-laravel-version.md))
- [Fix Writable Config Files](https://stackshield.io/fix/writable-config-files) ([md](https://stackshield.io/fix/writable-config-files.md))
- [Fix Insecure Random Number Generation](https://stackshield.io/fix/insecure-random-generation) ([md](https://stackshield.io/fix/insecure-random-generation.md))
- [Fix Weak Encryption Cipher](https://stackshield.io/fix/weak-encryption-cipher) ([md](https://stackshield.io/fix/weak-encryption-cipher.md))

## Security Glossary

Laravel-specific explanations of common security terms.

- [Attack Surface](https://stackshield.io/glossary/attack-surface)
- [Attack Vector](https://stackshield.io/glossary/attack-vector)
- [External Attack Surface Management (EASM)](https://stackshield.io/glossary/easm)
- [Vulnerability](https://stackshield.io/glossary/vulnerability)
- [Exploit](https://stackshield.io/glossary/exploit)
- [CVE (Common Vulnerabilities and Exposures)](https://stackshield.io/glossary/cve)
- [Zero-Day Vulnerability](https://stackshield.io/glossary/zero-day)
- [Penetration Testing](https://stackshield.io/glossary/penetration-testing)
- [Vulnerability Scanning](https://stackshield.io/glossary/vulnerability-scanning)
- [Security Headers](https://stackshield.io/glossary/security-headers)
- [Cross-Site Scripting (XSS)](https://stackshield.io/glossary/xss)
- [Cross-Site Request Forgery (CSRF)](https://stackshield.io/glossary/csrf)
- [SQL Injection](https://stackshield.io/glossary/sql-injection)
- [HTTP Strict Transport Security (HSTS)](https://stackshield.io/glossary/hsts)
- [SSL/TLS](https://stackshield.io/glossary/ssl-tls)
- [Man-in-the-Middle Attack (MITM)](https://stackshield.io/glossary/man-in-the-middle)
- [Session Hijacking](https://stackshield.io/glossary/session-hijacking)
- [OWASP](https://stackshield.io/glossary/owasp)
- [OWASP Top 10](https://stackshield.io/glossary/owasp-top-10)
- [Rate Limiting](https://stackshield.io/glossary/rate-limiting)
- [Brute-Force Attack](https://stackshield.io/glossary/brute-force)
- [DDoS](https://stackshield.io/glossary/ddos)
- [Web Application Firewall (WAF)](https://stackshield.io/glossary/waf)
- [CORS](https://stackshield.io/glossary/cors)
- [Subdomain Takeover](https://stackshield.io/glossary/subdomain-takeover)
- [DNS Security](https://stackshield.io/glossary/dns-security)
- [SPF, DKIM, and DMARC](https://stackshield.io/glossary/spf-dkim-dmarc)
- [Configuration Drift](https://stackshield.io/glossary/configuration-drift)
- [Security Misconfiguration](https://stackshield.io/glossary/security-misconfiguration)
- [Phishing](https://stackshield.io/glossary/phishing)

## Security Checklists

Interactive checklists for Laravel security audits.

- [Laravel Production Deployment Security Checklist](https://stackshield.io/checklists/production-deployment)
- [Laravel API Security Checklist](https://stackshield.io/checklists/api-security)
- [Laravel Authentication Security Checklist](https://stackshield.io/checklists/authentication)
- [Laravel Pre-Launch Security Checklist](https://stackshield.io/checklists/pre-launch)
- [Laravel Post-Breach Response Checklist](https://stackshield.io/checklists/post-breach)
- [Laravel Quarterly Security Review Checklist](https://stackshield.io/checklists/quarterly-review)
- [Laravel Security Audit Checklist (47 Checks)](https://stackshield.io/checklists/laravel-security-audit)

## Comparisons

StackShield vs other security tools, focused on Laravel-specific use cases.

- [StackShield vs Detectify](https://stackshield.io/compare/detectify)
- [StackShield vs Intruder](https://stackshield.io/compare/intruder)
- [StackShield vs UpGuard](https://stackshield.io/compare/upguard)
- [StackShield vs OWASP ZAP](https://stackshield.io/compare/owasp-zap)
- [StackShield vs Pentest-Tools](https://stackshield.io/compare/pentest-tools)
- [StackShield vs Enlightn](https://stackshield.io/compare/enlightn)
- [StackShield vs Snyk](https://stackshield.io/compare/snyk)
- [StackShield vs SonarQube](https://stackshield.io/compare/sonarqube)
- [StackShield vs Acunetix](https://stackshield.io/compare/acunetix)
- [StackShield vs Nessus](https://stackshield.io/compare/nessus)
- [StackShield vs Qualys](https://stackshield.io/compare/qualys)
- [StackShield vs Burp Suite](https://stackshield.io/compare/burp-suite)
- [StackShield vs Nuclei](https://stackshield.io/compare/nuclei)
- [StackShield vs Scout Suite](https://stackshield.io/compare/scout-suite)
- [StackShield vs Laravel Shift](https://stackshield.io/compare/laravel-shift)
- [StackShield vs Probely](https://stackshield.io/compare/probely)
- [StackShield vs Ward](https://stackshield.io/compare/ward)
- [StackShield vs Laravel Nightwatch](https://stackshield.io/compare/laravel-nightwatch)

## Integrations

Connect StackShield alerts to your existing toolchain.

- [Slack Integration](https://stackshield.io/integrations/slack)
- [Email Alerts](https://stackshield.io/integrations/email)
- [Webhooks](https://stackshield.io/integrations/webhooks)
- [GitHub Actions](https://stackshield.io/integrations/github-actions)
- [GitLab CI/CD](https://stackshield.io/integrations/gitlab-ci)
- [Bitbucket Pipelines](https://stackshield.io/integrations/bitbucket-pipelines)
- [PagerDuty](https://stackshield.io/integrations/pagerduty)
- [Opsgenie](https://stackshield.io/integrations/opsgenie)
- [Laravel Forge](https://stackshield.io/integrations/laravel-forge)
- [Laravel Envoyer](https://stackshield.io/integrations/laravel-envoyer)
- [Vercel](https://stackshield.io/integrations/vercel)
- [Docker & Kubernetes](https://stackshield.io/integrations/docker-kubernetes)

## Blog

All posts available as `.md` by appending `.md` to the URL.

- [SSRF in Laravel: The Risk Hiding in Http::get()](https://stackshield.io/blog/laravel-ssrf-http-client-vulnerability) ([md](https://stackshield.io/blog/laravel-ssrf-http-client-vulnerability.md))
- [Adding Two-Factor Authentication to Laravel with Fortify](https://stackshield.io/blog/laravel-two-factor-authentication-fortify) ([md](https://stackshield.io/blog/laravel-two-factor-authentication-fortify.md))
- [CSRF Protection in Laravel: How It Works and the Mistakes That Disable It](https://stackshield.io/blog/laravel-csrf-protection-explained) ([md](https://stackshield.io/blog/laravel-csrf-protection-explained.md))
- [Securing Your Laravel CI/CD Pipeline: A Practical DevSecOps Guide](https://stackshield.io/blog/securing-laravel-ci-cd-pipeline-devsecops) ([md](https://stackshield.io/blog/securing-laravel-ci-cd-pipeline-devsecops.md))
- [Laravel Mass Assignment: How $fillable and $guarded Go Wrong](https://stackshield.io/blog/laravel-mass-assignment-fillable-guarded) ([md](https://stackshield.io/blog/laravel-mass-assignment-fillable-guarded.md))
- [SQL Injection in Laravel: Where Eloquent Protects You and Where It Doesn't](https://stackshield.io/blog/laravel-sql-injection-eloquent-query-builder) ([md](https://stackshield.io/blog/laravel-sql-injection-eloquent-query-builder.md))
- [Laravel Security Scans in GitHub Actions](https://stackshield.io/blog/laravel-security-github-actions-ci-cd) ([md](https://stackshield.io/blog/laravel-security-github-actions-ci-cd.md))
- [Laravel Session Security: HttpOnly, SameSite, and Secure Cookies](https://stackshield.io/blog/laravel-session-cookie-security) ([md](https://stackshield.io/blog/laravel-session-cookie-security.md))
- [Laravel Content Security Policy: Configure CSP Without Breaking Your App](https://stackshield.io/blog/laravel-content-security-policy-csp-guide) ([md](https://stackshield.io/blog/laravel-content-security-policy-csp-guide.md))
- [Laravel Is Now on the Same Federal Vulnerability List as Apple](https://stackshield.io/blog/cisa-kev-laravel-livewire-federal-vulnerability) ([md](https://stackshield.io/blog/cisa-kev-laravel-livewire-federal-vulnerability.md))
- [CVE-2026-31431: Why Every Laravel Server Needs a Kernel Update](https://stackshield.io/blog/copy-fail-linux-kernel-lpe-cve-2026-31431) ([md](https://stackshield.io/blog/copy-fail-linux-kernel-lpe-cve-2026-31431.md))
- [Composer Command Injection Flaws (CVE-2026-40261)](https://stackshield.io/blog/composer-command-injection-cve-2026-40261) ([md](https://stackshield.io/blog/composer-command-injection-cve-2026-40261.md))
- [The Intercom PHP Hack: How a Composer Plugin Stole Credentials](https://stackshield.io/blog/intercom-php-packagist-compromise) ([md](https://stackshield.io/blog/intercom-php-packagist-compromise.md))
- [CVE-2026-23524: Laravel Reverb RCE via Insecure Deserialization (CVSS 9.8)](https://stackshield.io/blog/laravel-reverb-rce-cve-2026-23524) ([md](https://stackshield.io/blog/laravel-reverb-rce-cve-2026-23524.md))
- [Laravel 13 Security: What Changed from Laravel 12](https://stackshield.io/blog/laravel-13-security-changes) ([md](https://stackshield.io/blog/laravel-13-security-changes.md))
- [PHP Security Audit: A Developer's Guide Beyond Laravel](https://stackshield.io/blog/php-security-audit-guide) ([md](https://stackshield.io/blog/php-security-audit-guide.md))
- [Automated Security Testing in Laravel CI/CD Pipelines](https://stackshield.io/blog/automated-security-testing-laravel-cicd) ([md](https://stackshield.io/blog/automated-security-testing-laravel-cicd.md))
- [Securing Laravel Horizon in Production](https://stackshield.io/blog/securing-laravel-horizon-production) ([md](https://stackshield.io/blog/securing-laravel-horizon-production.md))
- [How to Pentest a Laravel Application](https://stackshield.io/blog/how-to-pentest-laravel-application) ([md](https://stackshield.io/blog/how-to-pentest-laravel-application.md))
- [Open Ports in Production: Why Your Laravel Server Has More Exposed Services Than You Think](https://stackshield.io/blog/open-ports-production-security) ([md](https://stackshield.io/blog/open-ports-production-security.md))
- [Laravel XSS Protection: Blade, Livewire, and Raw Output](https://stackshield.io/blog/laravel-xss-protection-guide) ([md](https://stackshield.io/blog/laravel-xss-protection-guide.md))
- [How to Security Audit a Laravel Application](https://stackshield.io/blog/laravel-security-audit-guide) ([md](https://stackshield.io/blog/laravel-security-audit-guide.md))
- [Security Headers for SOC 2 and ISO 27001](https://stackshield.io/blog/security-headers-soc2-iso27001-laravel) ([md](https://stackshield.io/blog/security-headers-soc2-iso27001-laravel.md))
- [PHP Supply Chain Attacks: How Malicious Packages Sneak Into composer.json](https://stackshield.io/blog/php-supply-chain-attacks-composer) ([md](https://stackshield.io/blog/php-supply-chain-attacks-composer.md))
- [The Vercel Breach: What Happened and What You Should Do](https://stackshield.io/blog/vercel-april-2026-breach-what-happened) ([md](https://stackshield.io/blog/vercel-april-2026-breach-what-happened.md))
- [Laravel File Upload Security: 7 Vulnerabilities Attackers Exploit](https://stackshield.io/blog/laravel-file-upload-security) ([md](https://stackshield.io/blog/laravel-file-upload-security.md))
- [Subdomain Takeover: How Dangling DNS Records Put Your Laravel App at Risk](https://stackshield.io/blog/subdomain-takeover-dangling-dns) ([md](https://stackshield.io/blog/subdomain-takeover-dangling-dns.md))
- [5 CORS Misconfigurations in Laravel That Create Vulnerabilities](https://stackshield.io/blog/cors-misconfigurations-laravel) ([md](https://stackshield.io/blog/cors-misconfigurations-laravel.md))
- [The OWASP Top 10 Just Changed. Here Is What It Means for Laravel Teams.](https://stackshield.io/blog/owasp-top-10-2025-what-changed-laravel) ([md](https://stackshield.io/blog/owasp-top-10-2025-what-changed-laravel.md))
- [NIST SP 800-81r3 DNS Security: 6 Changes That Affect Your Infrastructure](https://stackshield.io/blog/nist-dns-security-sp-800-81r3) ([md](https://stackshield.io/blog/nist-dns-security-sp-800-81r3.md))
- [Your Laravel APP_KEY Is on GitHub. That Means RCE.](https://stackshield.io/blog/laravel-app-key-rce-exposure) ([md](https://stackshield.io/blog/laravel-app-key-rce-exposure.md))
- [CVE-2025-54068: Critical Livewire RCE Vulnerability](https://stackshield.io/blog/livewire-rce-cve-2025-54068) ([md](https://stackshield.io/blog/livewire-rce-cve-2025-54068.md))
- [Fake Laravel Packages on Packagist Are Installing Backdoors](https://stackshield.io/blog/malicious-laravel-packages-packagist-rat) ([md](https://stackshield.io/blog/malicious-laravel-packages-packagist-rat.md))
- [GitLab 2FA Bypass (CVE-2026-0723)](https://stackshield.io/blog/gitlab-2fa-bypass-cve-2026-0723) ([md](https://stackshield.io/blog/gitlab-2fa-bypass-cve-2026-0723.md))
- [AI Is Writing Your Laravel Code. Who Is Checking Its Security?](https://stackshield.io/blog/ai-assisted-coding-laravel-security) ([md](https://stackshield.io/blog/ai-assisted-coding-laravel-security.md))
- [The Complete Laravel Security Checklist for 2026](https://stackshield.io/blog/laravel-security-checklist) ([md](https://stackshield.io/blog/laravel-security-checklist.md))
- [What Is External Attack Surface Management (EASM)?](https://stackshield.io/blog/what-is-external-attack-surface-management) ([md](https://stackshield.io/blog/what-is-external-attack-surface-management.md))
- [How to Secure a Laravel Application: 2026 Hardening Guide](https://stackshield.io/blog/how-to-secure-laravel-application) ([md](https://stackshield.io/blog/how-to-secure-laravel-application.md))
- [Best Laravel Security Tools Compared (2026)](https://stackshield.io/blog/laravel-security-tools-compared) ([md](https://stackshield.io/blog/laravel-security-tools-compared.md))
- [Continuous Security Monitoring vs Annual Pentesting](https://stackshield.io/blog/continuous-security-monitoring-vs-pentesting) ([md](https://stackshield.io/blog/continuous-security-monitoring-vs-pentesting.md))
- [Laravel Debug Mode in Production: What Attackers See](https://stackshield.io/blog/laravel-debug-mode-production) ([md](https://stackshield.io/blog/laravel-debug-mode-production.md))
- [OWASP Top 10 in Laravel: Real Vulnerabilities, Real Code Fixes (2026)](https://stackshield.io/blog/owasp-top-10-laravel) ([md](https://stackshield.io/blog/owasp-top-10-laravel.md))
- [Your Laravel .env File Is Probably Exposed Right Now](https://stackshield.io/blog/laravel-env-file-exposed) ([md](https://stackshield.io/blog/laravel-env-file-exposed.md))
- [Laravel Telescope in Production: Security Risks](https://stackshield.io/blog/laravel-telescope-production-security) ([md](https://stackshield.io/blog/laravel-telescope-production-security.md))
- [What Is an Attack Surface? A Developer's Guide](https://stackshield.io/blog/what-is-an-attack-surface) ([md](https://stackshield.io/blog/what-is-an-attack-surface.md))
- [Composer Audit: Find Vulnerable PHP Packages Before Attackers Do](https://stackshield.io/blog/composer-vulnerability-management) ([md](https://stackshield.io/blog/composer-vulnerability-management.md))
- [Laravel Security Guide: Every Vulnerability, Fix Guide & Checklist in One Place](https://stackshield.io/blog/securing-laravel-apps) ([md](https://stackshield.io/blog/securing-laravel-apps.md))
- [A Guide to Security Headers for Laravel Applications](https://stackshield.io/blog/types-of-security-headers) ([md](https://stackshield.io/blog/types-of-security-headers.md))

## Company

- Website: https://stackshield.io
- Category: SaaS, DevSecOps, Laravel Security, External Attack Surface Management
- Pricing: From $29/month, 14-day free trial