Finds the lines in your Laravel Livewire and Blade files that the browser can reach, change or call, and names the fix on each one. Runs entirely in your browser — nothing is uploaded.
Same engine as the VS Code extension, byte for byte.
This page is the working piece. The full pack has everything below.
Marks every line of a Livewire or Blade file that the visitor's browser can call, rewrite or read
A single-application web penetration test typically starts around $2,000.
Buy the full version — $29It reads the PHP or Blade file you have open and marks every line the visitor's browser can reach: public methods callable as $wire.name(), public properties the browser round-trips and can rewrite, secrets serialized into the page HTML, unvalidated uploads, unescaped Blade echoes. Ten rules, and each finding carries the line number and the one-line fix.
Laravel teams shipping Livewire 3 components: agencies handing an app to a client, product teams reviewing components an AI assistant wrote, and contractors answering a customer security questionnaire. One unguarded public method that hands over another tenant's record is a breach with a 72-hour GDPR Article 33 reporting clock attached to it.
PHPStan, Psalm and Larastan model public the way PHP defines it, as reachable from other PHP. Livewire redefines public as reachable from the visitor's browser, and no general PHP linter ships a rule for that round-trip. A chatbot can explain the idea but cannot walk your files. The sample component here returns fourteen findings across fifty-eight lines.
Free covers one file completely: open any .php or .blade.php file, run the check, and you get all ten rules, every finding, the line number and the fix. No watermark, no counter, no locked result. The full version changes the axis instead: it sweeps the whole workspace at once and exports a dated Markdown or JSON audit.
A single-application web penetration test typically starts around $2,000, and a security questionnaire answered by a senior Laravel contractor costs a day of that contractor's rate. The full version is $29 once, one licence key per person or team seat, with a seven-day full refund. The free tier stays free and needs no key at all.
One question, answered by the person who built it. Your email only if you want the answer sent.