Laravel Enlightn Pro v1.16

A Laravel Tool To Boost Your App’s Performance & Security

Think of Enlightn as your performance and security consultant. Enlightn will "review" your code and server configurations, and give you actionable recommendations on improving performance, security and reliability!

The Enlightn OSS (open source software) version has 64 automated checks that scan your application code, web server configurations and routes to identify performance bottlenecks, possible security vulnerabilities and code reliability issues.

Enlightn Pro (commercial) total of 128 checks.

Performance Checks (37 Automated Checks including 19 Enlightn Pro Checks)​

• Performance Quick Wins (In-Built In Laravel): Route caching, config caching, etc.
• Performance Bottleneck Identification: Middleware bloat, identification of slow, duplicate and N+1 queries, etc.
• Serving Assets: Minification, cache headers, CDN and compression headers.
• Infrastructure Tuning: Opcache, cache hit ratio, unix sockets for single server setups, etc.
• Choosing The Right Driver: Choosing the right session, queue and cache drivers for your app.
• Good Practices: Separate Redis databases for locks, dont install dev dependencies in production, etc.

Security Checks (48 Automated Checks including 28 Enlightn Pro Checks)​

• Basic Security: Turn off app debug in production, app key, CSRF protection, login throttling, etc.
• Cookie Security and Session Management: Cookie encryption, secure cookie attributes, session timeouts, etc.
• Mass Assignment: Detection of mass assignment vulnerabilities, unguarded models, etc.
• SQL Injection Attacks: Detection of raw SQL injection, column name SQL injection, validation rule injection, etc.
• Security Headers: XSS, HSTS, clickjacking and MIME protection headers.
• Unrestricted File Uploads and DOS Attacks: Detection of directory traversal, storage DOS, unrestricted file uploads, etc.
• Injection and Phishing Attacks: Detection of command injection, host injection, object injection, open redirection, etc.
• Dependency Management: Backend and frontend vulnerability scanning, stable and up-to-date dependency checks, licensing, etc.

Reliability Checks (43 Automated Checks including 17 Enlightn Pro Checks)​

• Code Reliability and Bug Detection: Invalid function calls, method calls, offsets, imports, return statements, syntax errors, etc.
• Health Checks: Health checks for cache, DB, directory permissions, migrations, disk space, symlinks, Redis, etc.
• Detecting Misconfigurations: Cache prefix, queue timeouts, failed job timeouts, Horizon provisioning plans, eviction policy, etc.
• Dead Routes and Dead Code: Detection of dead routes and dead/unreachable code.
• Good Practices: Cache busting, Composer scripts, env variables, avoiding globals and superglobals, etc.

DOCUMENTATION