Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.

Audit your PHP version for known CVEs and patches

WEB SQLi Injection DB Dumper DATA Hacking Tool

A high performance, self-updating, single thread command-line virus scanner written in PHP.

Joomla security scanner for detecting malware, webshells, rogue admins, and exploit artifacts from SP Page Builder and JCE vulnerabilities.

Laravel security scanner — detects SQL injection, missing auth middleware, XSS risks. Generates HTML vulnerability reports.

Magento 2 Security Extension Free automatically scan your store for any database or backend vulnerability and alerts you so you can fix them and protect Magento security.

Core-API for managing the SIWECOS scanners

Security.txt Manager for WordPress. For more plugins, visit https://handyplugins.co/

🔍 VirusTotal API domain scanner with web UI, real-time logging, and email alerts | Automatischer Domain-Scanner mit Live-Dashboard und E-Mail-Benachrichtigungen

PHP code sniffer plugin for Drupal code security audit.

Automated code analysis for Laravel applications with 73 comprehensive analyzers covering security, performance, reliability, code quality, and best practices. Works with Laravel 9+.

CMS Version Scanner for the SIWECOS project

OpenHealth is an open-source Laravel API that scans websites for vulnerabilities and reports their security health. Simply send a URL, and OpenHealth checks it for potential risks, helping developers and teams keep their sites safe and secure.

Mail Message-ID Fingerprinting

Central repository for third party Magento extensions with known security issues.

KanxPHP API Web-Scan Toolkit including tools such as Auditor, SSL Check, Robots, Dns, Whois, Geo Location, Trust Score

Small PHP CLI script to check if your password has been pwned or not through the api pwnedpasswords.com

One of Best Path traversal and PRL attack tools by TS/SCI Security (year 2008). Also tool is included on BackTrack 4 and OWASP Phoenix/Tools Project.