What will you actually check on my Laravel?

.env and laravel.log, Telescope, Horizon, Pulse, Debugbar, the Symfony profiler, and CVEs for the framework version we can see.

Do I have to install an agent?

No. You enter the public URL. The audit runs from the outside against what the internet can already see.

You get the report in your account after signup. $49 covers the month, and this run is included.

One month of Starter access: up to 10 runs and 3 domains, including this audit. The finished report stays in the account.

Laravel security audit

Is a .env on the web root?

Deeper than a manual audit or a tool. At the scale AI agents attack.

The audit starts after signup. $49 for one month. Your report stays in your account.

Laravel templateyour-site.com

01 / 08·running

Public surface

Other hosts and open ports

Live audit preview$49 · 1 month

Signals

Framework versionLaravel or Symfony, and the release your public files give away.
Known CVEsPublished holes in that framework release.
Secrets and logs.env, laravel.log, and composer manifests anyone can download.
Debug toolsTelescope, Horizon, Pulse, Debugbar, and the Symfony profiler.

How it runs

Other hostnames on the same domain, then the ports those servers leave open, before anything Laravel-specific.

Laravel or Symfony version, then .env, laravel.log, Telescope, Horizon, Debugbar, and the Symfony profiler.

Framework version
Laravel or Symfony, and the release your public files give away.
Known CVEs
Published holes in that framework release.
Secrets and logs
.env, laravel.log, and composer manifests anyone can download.
Debug tools
Telescope, Horizon, Pulse, Debugbar, and the Symfony profiler.

Each issue names the host, shows the evidence, and says what to fix. Anything we could not confirm stays marked that way.

FAQ

What the run covers, and when the report opens in the account.

Laravel audit

Audit Laravel from the outside.

Deeper than a manual audit or a tool. At the scale AI agents attack.