What problem does it solve?
Laravel applications often ship with insecure defaults and misconfigurations that expose authentication weaknesses, insecure data handling, and risky deployment practices. This Skill provides a comprehensive, developer-focused guide to hardening Laravel apps across authentication, authorization, validation, CSRF protection, mass assignment, file uploads, secrets, rate limiting, and deployment hardening.
Core Features & Use Cases
- Middleware-based protections (CSRF, security headers) to reduce attack surface.
- Guards, policies, and Form Requests to enforce proper authorization and input validation.
- Best practices for secret management, secure cookies, password hashing, and safe logging to prevent data exposure and credential leakage.
- Use Case: apply these guidelines to secure a new Laravel API or an admin panel with trusted roles and audited actions.
Quick Start
Apply the Laravel security best practices to harden auth, validation, CSRF, and deployments in your app workflow.