{"repo":"Eljakani/ward","free":true,"listed":false,"github":"https://github.com/Eljakani/ward","clone":"git clone https://github.com/Eljakani/ward.git","description":"Security scanner built for Laravel, detects misconfigurations, vulnerabilities, and exposed secrets with a beautiful TUI.","language":"Go","stars":331,"topics":["cli","cve","golang","laravel","laravel-security","scanner","security","static-analysis","tui","vulnerability-scanner"],"license":"MIT","category":"security-tools","readme_excerpt":"A security scanner built specifically for Laravel. Ward understands your Laravel application — its routes, models, controllers, middleware, Blade templates, config files, .env secrets, Composer dependencies, and more. It doesn't just grep for patterns. It resolves your project's structure first, then runs targeted security checks against it. --- Why Ward? Laravel gives you a lot out of the box — CSRF protection, Eloquent's mass assignment guards, Bcrypt hashing, encrypted cookies. But it's easy to misconfigure things or leave gaps that standard linters won't catch: - APP DEBUG=true shipping to production - A controller action with no authorization check - $guarded = [] on a model that handles payments - DB::raw() with interpolated user input - Session cookies without the Secure flag - An API route group missing auth:sanctum - Outdated Composer packages with known CVEs - Blade templates using {!! !!} on user data Ward checks for all of these and more. It's designed to fit into the workflow you already have — run it locally during development, or wire it into CI to gate deployments. --- How It Works Ward scans your project in a pipeline of five stages: 1. Provider — Locates and prepares your project source. Supports local paths and git URLs (shallow clone). 2. Resolvers — Parses composer.json , composer.lock , .env , and config/ .php to build a structured project context: framework version, PHP version, installed packages, environment variables, config files. 3. Scanners — Inde","default_branch":null,"files":null,"tree":[],"storefront":"/r/Eljakani","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Eljakani/ward/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}