---
title: "Ward: A Security Scanner for Laravel"
url: https://daily.dev/posts/ward-a-security-scanner-for-laravel-ssd7ztpcc
source_url: https://laravel-news.com/ward-a-security-scanner-for-laravel
type: article
source: "Laravel News"
published: 2026-03-03T14:20:05.498Z
updated: 2026-03-03T14:20:25.857Z
tags: ["golang", "cicd", "php", "laravel"]
reading_time: 4
upvotes: 74
comments: 1
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Ward: A Security Scanner for Laravel

**[Laravel News](https://daily.dev/sources/ln)** · 4 min read · 74 upvotes · 1 comments

## Summary

Ward is a Go-based command-line security scanner built specifically for Laravel projects. It parses Laravel's structure (routes, models, controllers, Blade templates, config files, env vars, dependencies) and runs four targeted scan engines: env-scanner, config-scanner, dependency-scanner (using live OSV.dev data), and a rules-scanner with 42 built-in rules covering secrets, injection, XSS, weak crypto, and more. It features a terminal UI, multiple output formats (JSON, SARIF, HTML, Markdown), CI/CD integration with exit-code gating, baseline management to track acknowledged findings, custom rule support, and scan history diffing.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://laravel-news.com/ward-a-security-scanner-for-laravel>

## Community discussion

Top comments from developers on daily.dev.

**@astrootter** · 1 upvotes

> I want the same for Symfony & API Platform :D !!!

## Similar posts on daily.dev

- [Lens for Laravel Brings WCAG Auditing to Your Local Dev Workflow](https://daily.dev/posts/lens-for-laravel-brings-wcag-auditing-to-your-local-dev-workflow-qrxxbqg9s) · Laravel News · 12 upvotes · 2 comments

---

Tags: [#golang](https://daily.dev/tags/golang), [#cicd](https://daily.dev/tags/cicd), [#php](https://daily.dev/tags/php), [#laravel](https://daily.dev/tags/laravel)

[View this post on daily.dev](https://daily.dev/posts/ward-a-security-scanner-for-laravel-ssd7ztpcc)
