Free Laravel Security Scanner
Paste a public Laravel repository's GitHub URL to run 39 Laravel-aware checks: mass assignment, SQL injection, XSS, CSRF exemptions, exposed debug routes, credential leaks and vulnerable dependencies. A-grade projects join the public A-list. Full results stay private to the project's maintainers, who can claim the repo to read them.
How the Laravel Security Scan Works
1. Download & Parse
We download the repository's source from GitHub and parse its PHP into an AST. Nothing is installed or executed, and the source is deleted as soon as the scan ends.
2. Run 39 Checks
Laravel-specific static analysis that resolves routes, middleware and controllers the way the framework does, plus known vulnerabilities in composer.lock.
3. Grade & Report
Each project gets a grade from A to D. Only A is published. Verified maintainers see every finding with remediation guidance.
Limited to 3 scans per hour. A repository scanned in the last 24 hours returns its latest result.