Catch the security, performance, and reliability problems in your Laravel app — automatically, before they ship.
ShieldCI is a Laravel-aware static analysis and security scanner. Its analyzers check your code and configuration for vulnerabilities, misconfigurations, and performance pitfalls, and every finding comes with a fix. It works alongside PHPStan and Larastan: they check your types, and ShieldCI checks security, performance, and reliability.
composer require shieldci/laravel
php artisan shield:analyze| Package | What it is |
|---|---|
| shieldci/laravel | 73 free, open-source analyzers for security, performance, reliability, code quality, and best practices. PHP 8.1+, Laravel 9+. |
| shieldci/analyzers-core | A framework-agnostic foundation for building PHP static analysis tools. |
| ShieldCI/docs | The source of docs.shieldci.com: a detect-and-fix guide for every analyzer. |
ShieldCI Pro adds 82 more analyzers (155 in total). On shieldci.com, your team gets a dashboard to track, assign, and resolve findings across every project and to gate merges in CI. Start free.
📚 Documentation · 🛡️ shieldci.com · 🤝 Contributing · 🔒 Security policy