README

Real-time website monitoring, security & performance tracking for PHP applications.
Visit ShieldPress Dashboard →

shieldpress/tracker-php

A lightweight, zero-dependency SDK that monitors your PHP application in real time. It collects system metrics, HTTP performance data, security threats, and runtime health — then reports everything to your ShieldPress dashboard for visualization and alerting.

Get started free — sign up at shieldpress.net to create your dashboard, then install this SDK to start monitoring.

Features

System Metrics — CPU, RAM, disk, load average, OPcache hit rate
HTTP Tracking — response times (avg, p50, p95, p99), status codes, top paths, RPS
Error Tracking — exceptions, PHP errors, manual captures with stack traces
Security Monitoring — SQL injection, XSS, command injection, path traversal, bot detection, brute-force
Runtime Performance — OPcache stats, memory peak, included files, realpath cache
Environment Security — PHP version EOL check, security headers, display_errors, expose_php, sensitive env vars
Database Monitoring — query count, slow queries, per-connection stats, top slowest queries
Cache Monitoring — hit/miss rates, Redis server info, memory usage, evicted keys
External HTTP Tracking — outgoing API calls, per-host stats, slow call detection
Laravel Integration — ServiceProvider, Middleware, config publishing
Generic Middleware — works with any PHP app (Slim, Symfony, vanilla PHP)
Zero dependencies — only requires ext-json and ext-curl

Requirements

PHP >= 7.4
ext-json
ext-curl

Installation

composer require shieldpress/tracker-php

Quick Start

Laravel

1. Add env vars:

SHIELDPRESS_API_KEY=sp_xxx
SHIELDPRESS_SITE_ID=site_xxx

2. Publish config (optional):

php artisan vendor:publish --tag=shieldpress-config

3. Add middleware to bootstrap/app.php (Laravel 11+):

->withMiddleware(function (Middleware $middleware) {
    $middleware->append(\ShieldPress\Tracker\Middleware\LaravelMiddleware::class);
})

Or for Laravel 10 in app/Http/Kernel.php:

protected $middleware = [
    \ShieldPress\Tracker\Middleware\LaravelMiddleware::class,
    // ...
];

That's it! The ServiceProvider auto-registers via composer.json extra.laravel.providers.

Vanilla PHP

<?php
require_once 'vendor/autoload.php';

use ShieldPress\Tracker\ShieldPressTracker;
use ShieldPress\Tracker\Middleware\GenericMiddleware;

$tracker = new ShieldPressTracker([
    'api_key' => 'sp_xxx',
    'site_id' => 'site_xxx',
    'app_name' => 'my-php-app',
]);
$tracker->start();

$middleware = new GenericMiddleware($tracker);
$middleware->start();

// ... your app logic ...

$middleware->finish(http_response_code());

Slim Framework

$app->add(function ($request, $handler) {
    $tracker = ShieldPressTracker::getInstance([
        'api_key' => $_ENV['SHIELDPRESS_API_KEY'],
        'site_id' => $_ENV['SHIELDPRESS_SITE_ID'],
    ]);

    $middleware = new \ShieldPress\Tracker\Middleware\GenericMiddleware($tracker);
    $middleware->start();

    $response = $handler->handle($request);

    $middleware->finish($response->getStatusCode());
    return $response;
});

Support

Dashboard & Docs: shieldpress.net
Issues: GitHub Issues

License

MIT

shieldpress / tracker-php

Maintainers

Package info

Statistics

Security