Shipped Shield v1.0.0 (stero/shield), an open source intrusion detection and prevention layer for PHP apps. MIT licensed.
How it behaves:
- Detect-only by default. It records what it would have blocked, and you switch on enforcement after reading real events.
- Fails open. A bug in Shield can never take your app down.
- Blocked clients get a 404, not a 403, so nothing confirms the path exists.
- Bans always expire and escalate. Only honeypot hits cause them.
- Never logs bodies, cookies or tokens.
Framework-agnostic core, Redis store, a Laravel 13 adapter (php artisan shield:install) and a CLI viewer (shield tail, events, stats). Needs PHP 8.5+.
composer require stero/shield
https://github.com/SterotECH/shield
GitHubGitHub - SterotECH/shield: Framework-agnostic intrusion detection and prevention for PHP applications, with Laravel integration and fail-open protection.Framework-agnostic intrusion detection and prevention for PHP applications, with Laravel integration and fail-open protection. - SterotECH/shield
commit 790f6d4