lampedev/security-suite

Laravel Security Suite with WAF Middleware, Audit Logging and DevSecOps tools

dev-main 2026-05-06 15:57 UTC

Requires

• php: >=8.2
• illuminate/http: ^10.0|^11.0|^12.0
• illuminate/support: ^10.0|^11.0|^12.0

MIT

• LampDevs

• logging
• security
• firewall
• Audit
• middleware
• laravel
• waf
• devsecops

README

This repository contains a collection of Laravel packages developed by LampDevs, focused on:

• 🔐 Security (WAF, Firewall, Protection)
• 📜 Audit & Logging
• 💾 Backup & Recovery
• ⚙️ DevSecOps automation tools

It is designed as a modular Laravel ecosystem for production-grade applications.

🚀 Project Vision

The goal of this monorepo is to build a complete Laravel Security & DevSecOps suite, including:

• Application security hardening
• Real-time attack detection
• Audit logging & compliance tracking
• Backup automation
• Extensible security services

📦 Repository Structure

packages/
├── config/
├── database/
│   └── migrations/
├── routes/
│
├── security-suite/
│   ├── config/
│   ├── database/
│   │   └── migrations/
│   ├── routes/
│   └── src/
│       ├── Http/
│       │   └── Middleware/
│       ├── Models/
│       ├── Providers/
│       ├── Services/
│       └── Traits/
│
└── src/
    ├── Http/
    │   └── Middleware/
    ├── Models/
    ├── Providers/
    ├── Services/
    └── Traits/

🔐 Included Packages

1. Security Suite (WAF + Audit System)

A Laravel security engine that provides:

🛡 Features

• Web Application Firewall (WAF)
• Attack detection (SQLi, XSS, RCE)
• IP blocking system
• Security event logging
• Audit trail support

⚙ Core Components

• WafMiddleware
• WafService
• BlockedIp Model

2. (Future Packages)

This monorepo will expand with:

• 💾 Backup Manager (auto backup system)
• 📊 Security Dashboard (admin panel)
• 🔔 Alert system (email / Slack / webhook)
• 🧠 AI anomaly detection engine

⚙️ Architecture Principles

This project follows:

• PSR-4 autoloading standard
• Laravel Service Container
• Middleware-based security layer
• Modular package architecture
• DevSecOps best practices

🔐 DevSecOps Approach

Security is integrated at all levels:

• Input validation & inspection
• Request pattern detection
• Real-time IP blocking
• Logging for audit compliance
• Extensible security services

📦 Installation (example per package)

composer require lampedev/security-suite

🧠 Design Philosophy

This repository is built with the idea that:

Security is not a feature — it is a foundation.

🚀 Roadmap

• Central security dashboard
• Redis-based blacklist system
• Rate limiting engine
• Geo-blocking module
• SIEM integration (Wazuh / ELK)
• AI-based attack detection
• Cloud backup integration

🤝 Maintainer

LampDevs
ERP & DevSecOps Solutions

📄 License

MIT License