Protect PHP sites, from shared hosting to Laravel.
PHP runs a huge share of the web, which makes it a favourite target. BurstLayer blocks the common attacks, keeps PHP itself patched and watches your Laravel app for leaks.
When a flaw is found in PHP, millions of sites need the same fix at once.
PHP is the language behind WordPress, Laravel and countless custom sites. When a serious flaw is announced in PHP itself, attackers start scanning for unpatched servers almost immediately. Patching quickly is what keeps you off their list.
What attacks PHP sites
Bots probe PHP sites for the same handful of mistakes all day long.
Flaws in PHP itself
We track every PHP release and patch your servers when a security fix comes out.
Exposed settings files
A badly set up server can hand out your .env file, which holds your database password. We block requests for it.
File upload attacks
Upload forms tricked into accepting a PHP file that gives attackers control. We stop those uploads and check your upload folders.
Database tricks
Form fields used to sneak commands into your database, known as SQL injection. Network Overwatch filters these requests.
Old Composer packages
Composer is how PHP projects install libraries. We flag packages with published flaws and suggest safe versions.
Debug mode left on
Laravel's debug pages can reveal passwords to anyone. We alert you if a live site has debug mode switched on.
See what attackers are looking for.
Every request that probes for secrets or known flaws is shown with a plain explanation of what it was after, and whether it was blocked.
- What each request was trying to do
- Blocked before it reaches PHP
- Real customers pass straight through
- GET /.envLooking for your passwords fileBlocked
- POST /wp-login.phpGuessing an admin passwordBlocked
- GET /vendor/phpunit/…/eval-stdin.phpLooking for an old test tool that runs codeBlocked
- GET /products?id=1' OR '1'='1Trying to trick the databaseBlocked
- GET /checkoutA real customerAllowed
How BurstLayer protects PHP and Laravel
Network Overwatch guards the front door, the server agent keeps PHP patched, and the Laravel package looks inside your app.
PHP version patching
Security releases of PHP are installed in stages, with a check that your site still answers after each one.
A web firewall
Requests for secrets, known exploits and database tricks are stopped before they reach PHP.
Composer checks
Your composer.lock file is checked against published security warnings on every deploy.
Debug mode alerts
A live site showing debug pages is reported within minutes.
Upload folder checks
Files that should not be in your upload folders are found and moved out of reach.
Secret checks
Database passwords and API keys in code or public folders are found and flagged.
Connect a Laravel app in two commands.
Install the Composer package in your app, then link it to your workspace. Add the server agent too if you manage the machine yourself.
$ composer require burstlayer/laravel✓ Package installed$ php artisan burstlayer:connect✓ App linked. Checking composer.lock and settings files.
On shared hosting without command-line access, connect your site from the BurstLayer dashboard instead.
- 01
Add the package
One Composer command adds deeper checks for Laravel apps. Plain PHP sites can skip this step.
- 02
Point your domain
Route traffic through Network Overwatch with a DNS change, so attacks stop before your server.
- 03
Let us patch PHP
If you run your own server, the agent installs PHP security releases in a window you choose.
The products behind it
Each one works on its own. Together they cover PHP & Laravel, from the network edge to the last line of code.
Questions, answered.
Does it work on shared hosting?+
Yes. Network Overwatch protects your site from the outside without installing anything on the server. Patching PHP itself is then up to your hosting company.
Which PHP versions are supported?+
PHP 7.4 and newer. We also warn you when your version no longer gets security fixes from the PHP team.
Do I need Laravel?+
No. Any PHP site works. The Laravel package adds deeper checks for Laravel apps.
Be patched before the scanners arrive.
Free for your first project. Connect a PHP site and see what bots have been probing for.