Securie for Laravel 12
Laravel 12 + Sanctum + Eloquent. Missing middleware on routes, missing per-user scope on Eloquent queries, leaked Sanctum tokens are the common bugs.
Why it matters for Laravel 12
Securie reviews every Laravel PR; specialists cover middleware ordering, Sanctum scopes, and Eloquent BOLA.
- Designed for Laravel 12+
- Catches missing auth middleware
- Validates Sanctum token scopes
- Works with Forge + Vapor + bare-metal
Common bugs we catch in Laravel 12
Route without auth middleware
Route::get without ->middleware('auth:sanctum') ships unauthenticated.
Read the guide →Eloquent without per-user scope
Order::find($id) without ->where('user_id', auth()->id()) = BOLA.
Read the guide →Sanctum token over-broad scope
Tokens issued with abilities('*') vs ability-scoped tokens — token leak = full account access.
Read the guide →Install in under a minute
- Install the Securie GitHub App
- Securie auto-detects Laravel via composer.json
- Push any PR
Laravel is a trademark of Taylor Otwell. Securie is independent.