Log In Start Monitoring

Security Documentation

Learn how to identify and fix security vulnerabilities in your Laravel applications

↑↓ to navigate Enter to select Esc to close

Browse documentation

Welcome to StackShield Documentation

This comprehensive documentation library provides step-by-step guides for identifying and fixing security vulnerabilities in Laravel applications. Each guide includes detailed explanations, code examples, and best practices to help you secure your application.

How to use this documentation

Browse security issues by category below or use the search bar to find specific topics
Each guide shows the security risk, impact, and complete fix instructions
Copy code examples directly to your project with one click
Follow verification steps to confirm the vulnerability is fixed

Want automated security monitoring? StackShield continuously scans your Laravel application for these vulnerabilities and alerts you in real-time when issues are detected.

Product Guides

Getting Started

Learn what StackShield does and how to get up and running in minutes.

Security Checks

Create and manage domain checks with customizable security tests.

Scans & Results

Run scans, understand results, and review individual test findings.

Issues & Tracking

Track, resolve, and export security issues across your domains.

Notifications

Configure email, Slack, Teams, and webhook alerts for your team.

Scheduling

Set up automated recurring scans on hourly, daily, weekly, or monthly schedules.

Teams & Settings

Manage team members, roles, and account settings.

Billing & Plans

Understand plans, features, usage limits, and manage your subscription.

CI/CD Integration

Trigger scans from GitHub Actions, GitLab CI, and any CI/CD pipeline.

Application Security

Laravel Ignition Exposure

Checks if Laravel Ignition error page is exposed in production.

Laravel Telescope Exposure

Checks if Laravel Telescope debugging tool is exposed in production.

Laravel Debug Mode

Checks if Laravel debug mode is enabled in production.

CSRF Protection

Verifies CSRF token implementation on forms and APIs.

File Upload Security

Tests file upload endpoints for security vulnerabilities.

Session Configuration

Validates session security settings and configuration.

Infrastructure Security

Security Headers

Detects missing headers (CSP, HSTS, X-Frame-Options).

SSL/TLS Security

Checks SSL expiration, weak ciphers, and HSTS.

Cloud Storage Exposure

Detects public AWS S3, GCP, and DigitalOcean buckets.

Nmap Port Scanning

Comprehensive network and port scanning with service version detection using Nmap.

IP Reputation

Checks if the domain IP is listed in abuse databases.

DNS Security

Checks DNS configuration and security settings.

Authentication & Authorization

Brute Force Protection

Tests if login page blocks repeated failed login attempts.

JWT Token Security

Detects weak JWT tokens (HS256, missing exp).

CORS Misconfiguration

Identifies insecure CORS headers (Access-Control-Allow-Origin: *).

API Rate Limiting

Checks if API endpoints implement proper rate limiting.

File & Directory Security

Exposed .env Files

Checks if .env files are publicly accessible.

Directory & File Exposure

Scans for publicly accessible sensitive files (logs, .git).

Sensitive Laravel Files

Checks for exposed sensitive Laravel files (.git, logs, config).

Email & Domain Security

Subdomain Takeover

Detects unclaimed subdomains pointing to external services.

Email Security

Checks email configuration for security best practices.

Ready to secure your Laravel app?

StackShield automatically detects these security issues in your application and alerts you in real-time.

Start Free Trial Learn More