# akaunting/laravel-firewall

Web Application Firewall (WAF) package for Laravel

Repository: https://github.com/akaunting/laravel-firewall
Canonical: https://ross.abutalabs.com/products/laravel-firewall
Homepage: https://akaunting.com
Language: PHP
License: MIT
License Family: permissive
Topics: php, laravel, firewall, waf, security, blacklist, whitelist, akaunting
Last push: 2026-05-16T16:10:55+00:00

## Health v2 (maintenance only)
Score: 75/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 82, release rhythm 52, longevity 100
- inputs: {"age_days": 2605, "days_push": 109, "days_rel": 109, "gap_med": 401, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1005, forks 117 (observed 2026-08-28T04:03:11.771223+00:00)

## What it is
A Web Application Firewall (WAF) package for Laravel that protects applications from attacks like XSS, SQLi, RFI, LFI, and malicious user agents via route middleware. It blocks repeated attackers, logs failed logins, and sends email/Slack notifications when attacks are detected.

## Use cases
- protect a Laravel app from XSS and SQL injection attacks
- block IPs after repeated failed login attempts
- whitelist IPs for admin routes
- get Slack or email alerts when an attack is detected
- block requests based on user agent, referrer, or geolocation
- add a WAF to an existing PHP Laravel application

## When to choose
- you run a Laravel application and want middleware-based WAF protection without external infrastructure
- you need per-route IP whitelisting/blacklisting and attack notifications
- you want brute-force login protection built into your app

## When to avoid
- your application is not built on Laravel or PHP
- you need a network-level or reverse-proxy WAF like ModSecurity or Cloudflare
- you require advanced bot mitigation or DDoS protection at scale

## Facets
- artifact type: library
- maturity: active
- function: security, middleware, rate-limiting, logging, alerting
- domain: security, web-development, backend
- platform: php, self-hosted
- tags: waf, firewall, laravel-package, xss-protection, sql-injection, ip-blacklisting, ip-whitelisting, brute-force-protection, laravel, web-server

## Member repositories
- akaunting/laravel-firewall (main) score 75

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:11.771223+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:13:08.517685+00:00, confidence not recorded.
  - readme: https://github.com/akaunting/laravel-firewall (fetched 2026-08-28T04:03:11.771223+00:00, sha 42f3318c3f18)
  - homepage: https://akaunting.com (fetched 2026-08-29T13:13:14.005247+00:00, sha 7dc5b58862db)
  - site_page: https://akaunting.com/features (fetched 2026-08-29T13:13:14.014492+00:00, sha 5fd98089e50a)
  - site_page: https://akaunting.com/features/why-akaunting-cloud (fetched 2026-08-29T13:13:14.016733+00:00, sha 5b72b529318e)
  - site_page: https://akaunting.com/hc/docs (fetched 2026-08-29T13:13:14.018755+00:00, sha cd4a924da696)
  - site_page: https://akaunting.com/hc/docs/developers (fetched 2026-08-29T13:13:14.020597+00:00, sha cd4a924da696)
  - site_page: https://akaunting.com/about (fetched 2026-08-29T13:13:14.023942+00:00, sha a405876a992a)
  - site_page: https://akaunting.com/changelog/3.0 (fetched 2026-08-29T13:13:14.022283+00:00, sha ea949825299a)
- Data as of 2026-08-30T08:39:29.467469+00:00.