johnrivera7/filament-cybersecurity

Cybersecurity

Cybersecurity Dashboard for Filament: a read-only security posture auditor for Laravel apps. Score your environment, routes, sessions, Redis, queues/workers, PHP version and dangerous Composer packages — with remediation hints. Secrets are never shown in full.

Stable ^1.0 (MIT). Install from Packagist / GitHub releases — not @dev.

Features

• Cybersecurity Dashboard page with score (0–100) and grade A–F
• Environment checks: APP_DEBUG, APP_KEY, HTTPS APP_URL
• Session hardening: Secure, HttpOnly, SameSite, encrypt
• Sensitive routes without auth (Horizon, Telescope, Pulse, log-viewer, …)
• Composer CVE audit via composer audit (Packagist advisories)
• OSV.dev live CVE scan of composer.lock (no API key)
• Stack CVE / EOL: PHP, Laravel, Redis, MySQL/MariaDB/PostgreSQL via endoflife.date + NVD
• API routes without auth / throttle on POST
• .env vs .env.example key drift
• Horizon workers status in staging/production
• Mail driver sanity in strict profiles
• Filament plugins inventory
• Dangerous / debug Composer packages outside local
• Redis usage + PING + auth warning
• Queue/workers: flag sync in staging/production
• PHP version EOL detection
• Extensible SecurityCheck interface + plugin ->check(...)
• Artisan: php artisan cybersecurity:audit (CI-friendly exit codes)
• ES / EN translations

Requirements

Installation

composer require johnrivera7/filament-cybersecurity:^1.0

Register the plugin on your Filament panel:

use JohnRivera7\FilamentCybersecurity\FilamentCybersecurityPlugin;

public function panel(Panel $panel): Panel
{
    return $panel
        // ...
        ->plugin(
            FilamentCybersecurityPlugin::make()
                ->navigationGroup('Seguridad')
                ->navigationLabel('Cybersecurity Dashboard')
                ->permission('view_cybersecurity') // optional Gate / Shield
        );
}

Optional config:

php artisan vendor:publish --tag="filament-cybersecurity-config"

CLI / CI

php artisan cybersecurity:audit --fresh
php artisan cybersecurity:audit --json

Exit code is non-zero when the score is below 70.

Custom checks

FilamentCybersecurityPlugin::make()
    ->check(\App\Security\Checks\MyCustomCheck::class);

Implement JohnRivera7\FilamentCybersecurity\Audit\Contracts\SecurityCheck.

Filament directory images

Roadmap

• Composer advisory / CVE surface
• API throttle & Sanctum checks
• Horizon / Supervisor worker probes
• Sister plugin: antivirus / file integrity

License

MIT © John Rivera