{"id":13512156,"url":"https://github.com/guardrailsio/awesome-php-security","last_synced_at":"2025-10-22T15:31:25.541Z","repository":{"id":38206731,"uuid":"161420175","full_name":"guardrailsio/awesome-php-security","owner":"guardrailsio","description":"Awesome PHP Security Resources 🕶🐘🔐","archived":false,"fork":false,"pushed_at":"2023-09-14T12:25:04.000Z","size":35,"stargazers_count":1002,"open_issues_count":6,"forks_count":90,"subscribers_count":28,"default_branch":"master","last_synced_at":"2025-10-14T17:03:40.315Z","etag":null,"topics":["application-security","awesome","awesome-list","devsecops","php","security","security-tools"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/guardrailsio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":null,"code_of_conduct":"code-of-conduct.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2018-12-12T02:15:09.000Z","updated_at":"2025-10-14T06:50:10.000Z","dependencies_parsed_at":"2024-01-05T21:43:50.763Z","dependency_job_id":"dd037735-7c31-4532-8994-1ee338e4b178","html_url":"https://github.com/guardrailsio/awesome-php-security","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/guardrailsio/awesome-php-security","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guardrailsio%2Fawesome-php-security","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guardrailsio%2Fawesome-php-security/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guardrailsio%2Fawesome-php-security/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guardrailsio%2Fawesome-php-security/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/guardrailsio","download_url":"https://codeload.github.com/guardrailsio/awesome-php-security/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guardrailsio%2Fawesome-php-security/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":280207219,"owners_count":26290616,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-21T02:00:06.614Z","response_time":58,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["application-security","awesome","awesome-list","devsecops","php","security","security-tools"],"created_at":"2024-08-01T03:01:33.070Z","updated_at":"2025-10-22T15:31:25.248Z","avatar_url":"https://github.com/guardrailsio.png","language":null,"readme":"\u003cbr/\u003e\n\u003cdiv align=\"center\"\u003e\n\nA curated list of awesome PHP Security related resources.\n\n[![Awesome](https://awesome.re/badge.svg)](https://awesome.re)\n\n*List inspired by the [awesome](https://github.com/sindresorhus/awesome) list thing.*\n\nSupported by: [GuardRails.io](https://www.guardrails.io)\n\n\u003c/div\u003e\n\n# Contents\n\n- [Tools](#projects)\n  - [Web Framework Hardening](#web-framework-hardening)\n  - [Static Code Analysis](#static-code-analysis)\n  - [Vulnerabilities and Security Advisories](#vulnerabilities-and-security-advisories)\n- [Educational](#educational)\n  - [Hacking Playground](#hacking-playground)\n  - [Guides](#guides)\n- [Companies](#companies)\n- [Contributing](#contributing)\n\n# Tools\n\n## Web Framework Hardening\n\n- [Snuffleupagus](https://snuffleupagus.rtfd.io) - Security mondule for PHP7/8, the successsor to [suhosin](http://suhosin.org/stories/index.html).\n- [Secure-Headers](https://github.com/BePsvPT/secure-headers) - Add security related headers to HTTP response.\n\n## Static Code Analysis\n\n- [Enlightn](https://www.laravel-enlightn.com/) - Enlightn is a static and dynamic analysis tool to improve the security of Laravel applications. \n- [Exakat](https://github.com/exakat/exakat) - *Exakat* is a PHP static code analysis, with serious [Security reviews](https://exakat.readthedocs.io/en/latest/Rulesets.html#security).\n- [phpcs-security-audit](https://github.com/FloeDesignTechnologies/phpcs-security-audit) - phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code.\n  - `docker pull guardrails/phpcs-security-audit`\n- [progpilot](https://github.com/designsecurity/progpilot) - A static analyzer for security purposes.\n- [Parse](https://github.com/psecio/parse) - The *Parse* scanner is a static scanning tool to review your PHP code for potential security-related issues.\n- [SonarPHP](https://github.com/SonarSource/sonar-php) from [SonarQube](https://github.com/SonarSource/sonarqube) - A static code analyser for PHP language used as an extension for the SonarQube platform (200+ rules, Supports up to PHP 8, Import of unit test and coverage results, Support of custom rules)\n- [Snyk Code](https://snyk.io/product/snyk-code/) PHP support (beta) and available in Snyk free tier \n\n## Vulnerabilities and Security Advisories\n\n- [security-checker](https://github.com/sensiolabs/security-checker) - PHP frontend for security.symfony.com.\n  - `docker pull guardrails/security-checker`\n- [Symfony Security Monitoring](https://security.symfony.com/) - PHP security vulnerabilities monitoring.\n- [roave/security-advisories](https://github.com/Roave/SecurityAdvisories) - Add this dependency to disallow known/vulnerable installation of packages directly through `composer update`\n- [Security Advisories](https://github.com/FriendsOfPHP/security-advisories) - A database of PHP security advisories.\n- [php-malware-detector](https://github.com/ollyxar/php-malware-detector) - PHP malware detector\n- [Snyk Open Source](https://snyk.io/product/open-source-security-management/) - Package manager scanner with a free tier \n\n# Educational\n\n## Hacking Playground\n\n- [DVWA](https://github.com/ethicalhack3r/DVWA) - Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable.\n- [Insecure PHP Example](https://github.com/rickogden/insecure-php-example) - This is an example application built using Silex for routing to provide examples of SQL Injection, plain text passwords and XSS.\n\n## Guides\n\n- [Official PHP Security Manual](http://php.net/manual/en/security.php)\n- [Survive The Deep End: PHP Security](https://phpsecurity.readthedocs.io/en/latest/)\n- [Security Tips for a PHP Application](https://dev.to/restoreddev/security-tips-for-a-php-application-4e9a)\n- [Awesome-AppSec: PHP-Section](https://github.com/paragonie/awesome-appsec#php)\n- [The 2018 Guide to Building Secure PHP Software](https://paragonie.com/blog/2017/12/2018-guide-building-secure-php-software)\n\n# Companies\n\n- [GuardRails](https://www.guardrails.io) - A GitHub App that gives you instant security feedback in your Pull Requests.\n- [RIPS](https://www.ripstech.com) - RIPS is the leading security analysis solution for PHP\n- [Snyk](https://snyk.io) - A developer-first solution that automates finding \u0026 fixing vulnerabilities in your dependencies.\n- [Sqreen](https://sqreen.io) - Automated security for your web apps - real time application security protection.\n- [Paragon Initiative Enterprises](https://paragonie.com) - PHP Security and Cryptography consultants, open source library publishers.\n\n# Contributing\n\nFound an awesome project, package, article, other type of resources related to PHP Security? Submit a pull request!\nJust follow the [guidelines](/CONTRIBUTING.md). Thank you!\n\n## Inspiration\n\nThis awesome list was inspired by [awesome-nodejs-security](https://github.com/lirantal/awesome-nodejs-security) and [awesome-ruby-security](https://github.com/pxlpnk/awesome-ruby-security).\n\n## License\n\n[![CC0](https://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)](http://creativecommons.org/publicdomain/zero/1.0/)\n","funding_links":[],"categories":["Others","Programming Languages","\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集","\u003ca id=\"e97d183e67fa3f530e7d0e7e8c33ee62\"\u003e\u003c/a\u003e未分类","Coding","Dépôts"],"sub_categories":["\u003ca id=\"f110da0bf67359d3abc62b27d717e55e\"\u003e\u003c/a\u003e新添加的","Spécifique à une techno"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fguardrailsio%2Fawesome-php-security","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fguardrailsio%2Fawesome-php-security","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fguardrailsio%2Fawesome-php-security/lists"}