Blog

Laravel Security DevOps Environment Variables PHP

Stop Sharing .env Files in Slack: Laravel's Built-In env:encrypt Workflow

Laravel can encrypt .env files so they live in git, readable only with the key. The workflow, the new diff-friendly mode...

Oct 15, 2026 11 min read

Filament Laravel Livewire Security PHP

Filament 5.10 Security Fixes: The Livewire Scope Gap Your Upgrade Doesn't Close

Filament fixed four security advisories in 5.10. Upgrading closes most of them, but one root cause sits in Livewire and...

Oct 12, 2026 12 min read

Laravel Packages PHP Security Spatie

Spatie Permission vs Bouncer: One Question Decides Which One You Need

Spatie handles permissions on kinds of things. Bouncer handles them on particular things. That one difference decides wh...

Sep 10, 2026 8 min read

Laravel Security Logging Queues PHP

Your Query Bindings Are in Your Logs: Laravel 13.27 Can Mask Them, and How to Clean Up What Leaked

Every failed query in Laravel writes its real values into the error message. Where they end up, the one line that stops...

Sep 02, 2026 7 min read

Laravel MCP AI Agents Security PHP

Your Laravel MCP Server Is a Public API for Robots. Here's How to Lock It Down.

An MCP server is a public endpoint that lets an AI run your code. Most tutorials stop before the part where you stop it...

Aug 19, 2026 12 min read

Filament Laravel Performance Security PHP

Filament v4.12 and v5.7: 92% Faster Forms, and the Security Fixes You Still Have to Turn On

Filament's big performance release landed. The speed is free. The security half of the release is not, and the announcem...

Aug 10, 2026 11 min read

Laravel Laravel AI SDK AI Agents PHP Security

Human-in-the-Loop for Laravel AI Agents: Stop Your Agent Before It Refunds the Wrong Order

The Laravel AI SDK can now pause an agent before it runs a sensitive tool. Here is the complete approval flow and the pa...

Aug 03, 2026 13 min read

Laravel PHP Laravel 13 Security

What's New in Laravel 13.15: Typed Translations and More

Laravel 13.15 shipped typed translation accessors, JSON Schema unions, a Cloud queue driver, and a date_equals security...

Jul 15, 2026 8 min read

Laravel Livewire Security PHP

Every Livewire Public Property Is a Form Field: The Security Audit Every Laravel App Needs

Your Livewire public properties are visible in the browser and modifiable by anyone. Here is how to find the vulnerable...

Jun 08, 2026 8 min read

Laravel Spatie Security SaaS Audit Log

Building an Audit Log in Laravel with spatie/laravel-activitylog v5

spatie/laravel-activitylog v5 shipped with PHP 8.4+, a cleaner API, and customizable internals. Here's how to build a co...

May 11, 2026 11 min read

Laravel Authentication Security Passkeys WebAuthn

Laravel Now Has Native Passkeys: A Complete Guide to laravel/passkeys

Laravel shipped its own first-party passkeys package in April 2026. No more assembling WebAuthn by hand. Here's how to w...

May 09, 2026 10 min read

Laravel Claude Code Security AI Development PHP

How to Stop an AI Agent from Destroying Your Laravel App

An AI coding agent deleted a production database in 9 seconds last week. Here are the concrete Laravel-specific safeguar...

Apr 29, 2026 10 min read