johnrivera7/filament-cybersecurity

Filament Cybersecurity Dashboard — audit .env, routes, workers, Redis, PHP/Laravel posture and dependency advisories.

v1.3.0 2026-08-28 18:12 UTC

Requires

• php: ^8.2
• filament/filament: ^5.0
• illuminate/contracts: ^11.28|^12.0|^13.0
• illuminate/support: ^11.28|^12.0|^13.0
• spatie/laravel-package-tools: ^1.16
• symfony/process: ^6.4|^7.0|^8.0

Requires (Dev)

• laravel/pint: ^1.18
• phpunit/phpunit: ^11.0

MIT

• John Rivera

• security
• laravel
• filament
• filament-plugin
• cybersecurity
• security-audit

Published on Packagist.org on 2026-08-28 18:14 UTC

README

Cybersecurity Dashboard for Filament: a read-only security posture auditor for Laravel apps. Score your environment, routes, sessions, Redis, queues/workers, PHP version and dangerous Composer packages — with remediation hints. Secrets are never shown in full.

Stable ^1.0 (MIT). Install from Packagist / GitHub releases — not @dev.

Features

• Cybersecurity Dashboard page with score (0–100) and grade A–F
• Environment checks: APP_DEBUG, APP_KEY, HTTPS APP_URL
• Session hardening: Secure, HttpOnly, SameSite, encrypt
• Sensitive routes without auth (Horizon, Telescope, Pulse, log-viewer, …)
• Composer CVE audit via composer audit (Packagist advisories)
• OSV.dev live CVE scan of composer.lock (no API key)
• Stack CVE / EOL: PHP, Laravel, Redis, MySQL/MariaDB/PostgreSQL via endoflife.date + NVD
• API routes without auth / throttle on POST
• .env vs .env.example key drift
• Horizon workers status in staging/production
• Mail driver sanity in strict profiles
• Filament plugins inventory
• Dangerous / debug Composer packages outside local
• Redis usage + PING + auth warning
• Queue/workers: flag sync in staging/production
• PHP version EOL detection
• Extensible SecurityCheck interface + plugin ->check(...)
• Artisan: php artisan cybersecurity:audit (CI-friendly exit codes)
• ES / EN translations

Requirements

Stack	Versions
PHP	8.2+
Laravel	11.28+ / 12+ / 13+
Filament	5.x

Installation

composer require johnrivera7/filament-cybersecurity:^1.0

Register the plugin on your Filament panel:

use JohnRivera7\FilamentCybersecurity\FilamentCybersecurityPlugin;

public function panel(Panel $panel): Panel
{
    return $panel
        // ...
        ->plugin(
            FilamentCybersecurityPlugin::make()
                ->navigationGroup('Seguridad')
                ->navigationLabel('Cybersecurity Dashboard')
                ->permission('view_cybersecurity') // optional Gate / Shield
        );
}

Optional config:

php artisan vendor:publish --tag="filament-cybersecurity-config"

CLI / CI

php artisan cybersecurity:audit --fresh
php artisan cybersecurity:audit --json

Exit code is non-zero when the score is below 70.

Custom checks

FilamentCybersecurityPlugin::make()
    ->check(\App\Security\Checks\MyCustomCheck::class);

Implement JohnRivera7\FilamentCybersecurity\Audit\Contracts\SecurityCheck.

Filament directory images

File	Size	Field
art/banner.jpg	2560×1440	Image (required)
art/thumbnail.jpg	1920×1080	Thumbnail

Roadmap

• Composer advisory / CVE surface
• API throttle & Sanctum checks
• Horizon / Supervisor worker probes
• Sister plugin: antivirus / file integrity

License

MIT © John Rivera